The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
A company needs to provide users temporary access to S3 objects using pre-signed URLs. Which feature should they use?
AS3 Access Control List
BS3 Bucket Policy
CIAM Roles
DS3 Pre-signed URLs
Explanation
S3 Pre-signed URLs allow temporary access to specific objects, unlike the other options.
Q452
You are configuring a load balancer for a highly available web application. What should the health check be configured for?
AHTTP 404 Response
BTCP Connection
CHTTP 200 Response
DNone of the Above
Explanation
Health checks should confirm a successful HTTP 200 response, whereas the others do not indicate application availability.
Q453
Which service enables event-driven architecture in AWS?
AAmazon SQS
BAWS Lambda
CAmazon RDS
DAmazon EC2
Explanation
AWS Lambda runs code in response to events, whereas SQS, RDS, and EC2 have different primary functions.
Q454
A company needs to analyze streaming data in real-time. Which AWS service is most appropriate?
AAmazon Athena
BAWS Glue
CAmazon Kinesis
DAmazon EMR
Explanation
Amazon Kinesis is specifically designed for real-time data processing, unlike Athena and Glue which are for querying and ETL.
Q455
What happens when an AWS CloudFormation stack update operation fails?
AThe stack is deleted.
BThe stack is rolled back.
CThe stack remains unchanged.
DA new stack version is created.
Explanation
CloudFormation automatically rolls back changes to maintain the previous stable state on failure.
Q456
Which AWS service is best for data warehousing?
AAmazon Redshift
BAmazon S3
CAmazon DynamoDB
DAmazon RDS
Explanation
Amazon Redshift is specifically designed for data warehousing, whereas S3 is for storage, DynamoDB for NoSQL, and RDS for relational databases.
Q457
A company needs to migrate a highly available MySQL database to AWS. Which solution provides the least downtime during migration?
AAWS Database Migration Service
BAmazon RDS Snapshot
CManual Dump and Restore
DEC2 Instance Backup
Explanation
AWS Database Migration Service enables continuous replication with minimal downtime, while the other options involve more disruption.
Q458
What happens when you apply an IAM policy that denies all actions to a user?
AUser can still perform allowed actions
BUser is locked out permanently
CUser can perform no actions
DUser can only perform S3 actions
Explanation
A deny policy overrides allows, resulting in no actions being permitted for that user.
Q459
Which service enables you to run containers at scale?
AAmazon ECS
BAmazon Lightsail
CAWS Lambda
DAmazon S3
Explanation
Amazon ECS is designed specifically for running containers; Lightsail is for simple applications, Lambda is for serverless functions, and S3 is for object storage.
Q460
A company needs to migrate their legacy application to AWS while maintaining its architecture. What should they use?
AEC2 with insufficient rights
BAWS CodeDeploy
CAmazon Aurora
DAWS Application Migration Service
Explanation
AWS Application Migration Service aids in lift-and-shift migrations; others are not designed for architecture preservation.