The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
Explanation
VPC Flow Logs record network traffic and send the logs to an S3 bucket.
Q52
Which AWS service provides a fully managed serverless compute engine?
AAWS Lambda
BAmazon EC2
CAWS Elastic Beanstalk
DAmazon ECS
Explanation
AWS Lambda offers a fully managed serverless environment, while EC2, Elastic Beanstalk, and ECS require server management.
Q53
A company needs to optimize their cost for data transfer out of S3. Which S3 storage class should they consider for infrequently accessed data?
AS3 Standard
BS3 Intelligent-Tiering
CS3 One Zone-IA
DS3 Glacier
Explanation
S3 One Zone-IA is cost-effective for infrequent access, unlike the others which serve different access patterns.
Q54
You are configuring an Amazon RDS database. What happens when the instance runs out of allocated storage space?
AThe database is automatically deleted.
BDatabase performance improves temporarily.
CThe database goes into read-only mode.
DNew connections are rejected immediately.
Explanation
The database goes into read-only mode when storage capacity is exhausted to prevent data loss.
Q55
Which service is best for event-driven architectures?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Direct Connect
Explanation
AWS Lambda is designed for event-driven computing, while EC2 and RDS are for traditional deployments and Direct Connect is for network connections.
Q56
A company needs to ensure their EC2 instances are highly available. What should they do?
ADeploy instances in a single AZ
BUse Elastic Load Balancing
CSet a Security Group rule
DUse EBS volumes only
Explanation
Using Elastic Load Balancing distributes traffic, enhancing high availability, while a single AZ deployment does not.
Q57
What happens when an IAM role is assumed by a Lambda function?
AIt grants permissions immediately.
BIt creates a new user.
CIt attaches a policy.
DIt creates a temporary credential.
Explanation
IAM roles issue temporary credentials to the function upon being assumed, enabling it to act with defined permissions.
Q58
Which AWS service provides a managed NoSQL database?
ADynamoDB
BRDS
CElastiCache
DRedshift
Explanation
DynamoDB is specifically designed for NoSQL databases; RDS is for SQL, ElastiCache for caching, and Redshift for data warehousing.
Q59
A company needs to deploy a fault-tolerant application in a single AWS region. Which configuration should they use?
AMultiple Availability Zones
BSingle Availability Zone
CRegional Replication
DDirect Connect
Explanation
Deploying in multiple Availability Zones provides fault tolerance; single AZ lacks redundancy, regional replication is not applicable here, and Direct Connect is for dedicated connections.
Q60
What happens when an EC2 instance's IAM role is modified?
AImmediate effect on running instances
BReboot required for changes
CChanges apply only to future instances
DOld permissions persist until termination
Explanation
IAM role changes take effect only for new instances; running instances retain the previous role's permissions until stopped or terminated.