The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
A company needs to deploy a highly available web application across multiple AWS regions. Which service should they use?
AAWS Global Accelerator
BAmazon CloudFront
CAWS Direct Connect
DAmazon VPC
Explanation
AWS Global Accelerator improves application availability by routing traffic through the optimal region, unlike the other options that do not provide this capability.
Q442
What happens when you increase the instance size of an Amazon EC2 instance type during a scale-up operation?
AIt retains the same IP address.
BIt automatically backs up data.
CTraffic is automatically load balanced.
DIt requires a new security group.
Explanation
Increasing the instance size in EC2 keeps the same Elastic IP address, while the other options can lead to incorrect assumptions about instance operations.
Q443
You are configuring an Amazon RDS instance with Multi-AZ deployment. What happens during a maintenance event?
AIt switches to the standby instance.
BBoth instances go offline.
CYou lose data access temporarily.
DIt requires manual intervention.
Explanation
In a Multi-AZ deployment, RDS automatically switches to the standby instance during maintenance, ensuring high availability unlike the other options.
Q444
Which service can automate resource scaling based on demand?
AAWS Auto Scaling
BAmazon Lambda
CAWS CloudFormation
DAmazon RDS
Explanation
AWS Auto Scaling automatically adjusts resources based on demand; others do not focus on scaling.
Q445
A company needs to encrypt data at rest in S3. Which service should they use?
AS3 Versioning
BS3 Bucket Policies
CAWS KMS
DAWS WAF
Explanation
AWS KMS provides key management and encryption; the others are unrelated to data encryption.
Q446
What happens when a CloudTrail trail is deleted?
ANew logs continue to be recorded
BAll existing logs are immediately deleted
COnly logs published after deletion stop
DCloudTrail reconfigures automatically
Explanation
Logs before deletion remain and only new logging stops; the others misinterpret the deletion effect.
Q447
Which AWS service is primarily used for data warehousing?
AAmazon Redshift
BAmazon S3
CAmazon RDS
DAWS Glue
Explanation
Amazon Redshift is designed specifically for data warehousing, while the others serve different cloud storage and database purposes.
Q448
A company needs to manage IAM roles and permissions accurately. What principle should they implement?
AShared Responsibility Model
BLeast Privilege Access
CHorizontal Scaling
DHigh Availability
Explanation
Least Privilege Access ensures users have only necessary permissions, unlike the other principles not specifically related to IAM.
Q449
You are configuring an S3 bucket for static website hosting. What must be enabled for public access?
ABucket Versioning
BStatic Website Hosting
CCross-Region Replication
DObject Locking
Explanation
Static Website Hosting enables the functionality needed for public access; the other features do not relate directly to website hosting.
Q450
Which service allows you to run containers without managing servers?
AAmazon ECS
BAWS Lambda
CAmazon EC2
DAWS Batch
Explanation
Amazon ECS allows serverless container management, while other options manage compute differently.