SAP-C02 Free Practice Test

- (Exam Topic 1)
A company is using AWS Organizations lo manage multiple AWS accounts For security purposes, the company requires the creation of an Amazon Simple Notification Service (Amazon SNS) topic that enables integration with a third-party alerting system in all the Organizations member accounts
A solutions architect used an AWS CloudFormation template to create the SNS topic and stack sets to automate the deployment of CloudFormation stacks Trusted access has been enabled in Organizations
What should the solutions architect do to deploy the CloudFormation StackSets in all AWS accounts?

1. A. Create a stack set in the Organizations member account
2. B. Use service-managed permission
3. C. Set deployment options to deploy to an organizatio
4. D. Use CloudFormation StackSets drift detection.
5. E. Create stacks in the Organizations member account
6. F. Use self-service permission
7. G. Set deployment options to deploy to an organizatio
8. H. Enable the CloudFormation StackSets automatic deployment.
9. I. Create a stack set in the Organizations management account Use service-managed permission
10. J. Set deployment options to deploy to the organizatio
11. K. Enable CloudFormation StackSets automatic deployment.
12. L. Create stacks in the Organizations management accoun
13. M. Use service-managed permission
14. N. Set deployment options to deploy to the organizatio
15. O. Enable CloudFormation StackSets drift detection.

Correct Answer: C
https://aws.amazon.com/blogs/aws/use-cloudformation-stacksets-to-provision-resources-across-multiple-aws-ac

- (Exam Topic 3)
A company is running a workload that consists of thousands of Amazon EC2 instances. The workload is running in a VPC that contains several public subnets and private subnets. The public subnets have a route for 0.0.0.0/0 to an existing internet gateway. The private subnets have a route for 0.0.0.0/0 to an existing NAT gateway.
A solutions architect needs to migrate the entire fleet of EC2 instances to use IPv6. The EC2 instances that are in private subnets must not be accessible from the public internet.
What should the solutions architect do to meet these requirements?

1. A. Update the existing VPC, and associate a custom IPv6 CIDR block with the VPC and all subnets.Update all the VPC route tables, and add a route for ::/0 to the internet gateway.
2. B. Update the existing VPC, and associate an Amazon-provided IPv6 CIDR block with the VPC and all subnet
3. C. Update the VPC route tables for all private subnets, and add a route for ::/0 to the NAT gateway.
4. D. Update the existing VPC, and associate an Amazon-provided IPv6 CIDR block with the VPC and all subnet
5. E. Create an egress-only internet gatewa
6. F. Update the VPC route tables for all private subnets, and add a route for ::/0 to the egress-only internet gateway.
7. G. Update the existing VPC, and associate a custom IPv6 CIDR block with the VPC and all subnet
8. H. Create a new NAT gateway, and enable IPv6 suppor
9. I. Update the VPC route tables for all private subnets, and add a route for ::/0 to the IPv6-enabled NAT gateway.

Correct Answer: C

- (Exam Topic 1)
A company that has multiple AWS accounts is using AWS Organizations. The company’s AWS accounts host VPCs, Amazon EC2 instances, and containers.
The company’s compliance team has deployed a security tool in each VPC where the company has deployments. The security tools run on EC2 instances and send information to the AWS account that is dedicated for the compliance team. The company has tagged all the compliance-related resources with a key of “costCenter” and a value or “compliance”.
The company wants to identify the cost of the security tools that are running on the EC2 instances so that the company can charge the compliance team’s AWS account. The cost calculation must be as accurate as possible.
What should a solutions architect do to meet these requirements?

1. A. In the management account of the organization, activate the costCenter user-defined ta
2. B. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management accoun
3. C. Use the tag breakdown in the report to obtain the total cost for the costCenter tagged resources.
4. D. In the member accounts of the organization, activate the costCenter user-defined ta
5. E. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management accoun
6. F. Schedule a monthly AWS Lambda function to retrieve the reports and calculate the total cost for the costCenter tagged resources.
7. G. In the member accounts of the organization activate the costCenter user-defined ta
8. H. From the management account, schedule a monthly AWS Cost and Usage Repor
9. I. Use the tag breakdown in the report to calculate the total cost for the costCenter tagged resources.
10. J. Create a custom report in the organization view in AWS Trusted Adviso
11. K. Configure the report to generate a monthly billing summary for the costCenter tagged resources in the compliance team’s AWS account.

Correct Answer: A
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/custom-tags.html https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/configurecostallocreport.html

- (Exam Topic 1)
A company is storing data on premises on a Windows file server. The company produces 5 GB of new data daily.
The company migrated part of its Windows-based workload to AWS and needs the data to be available on a file system in the cloud. The company already has established an AWS Direct Connect connection between the on-premises network and AWS.
Which data migration strategy should the company use?

1. A. Use the file gateway option in AWS Storage Gateway to replace the existing Windows file server, and point the existing file share to the new file gateway.
2. B. Use AWS DataSync to schedule a daily task to replicate data between the on-premises Windows file server and Amazon FSx.
3. C. Use AWS Data Pipeline to schedule a daily task to replicate data between the on-premises Windows file server and Amazon Elastic File System (Amazon EFS).
4. D. Use AWS DataSync to schedule a daily task lo replicate data between the on-premises Windows file server and Amazon Elastic File System (Amazon EFS),

Correct Answer: B
https://aws.amazon.com/storagegateway/file/
https://docs.aws.amazon.com/fsx/latest/WindowsGuide/migrate-files-to-fsx-datasync.html https://docs.aws.amazon.com/systems-manager/latest/userguide/prereqs-operating-systems.html#prereqs-os-win

- (Exam Topic 3)
A media storage application uploads user photos to Amazon S3 for processing by AWS Lambda functions. Application state is stored in Amazon DynamoOB tables. Users are reporting that some uploaded photos are not being processed properly. The application developers trace the logs and find that Lambda is experiencing photo processing issues when thousands of users upload photos simultaneously. The issues are the result of Lambda concurrency limits and the performance of DynamoDB when data is saved.
Which combination of actions should a solutions architect take to increase the performance and reliability of the application? (Select TWO.)

1. A. Evaluate and adjust the RCUs for the DynamoDB tables.
2. B. Evaluate and adjust the WCUs for the DynamoDB tables.
3. C. Add an Amazon ElastiCache layer to increase the performance of Lambda functions.
4. D. Add an Amazon Simple Queue Service (Amazon SQS) queue and reprocessing logic between Amazon S3 and the Lambda functions.
5. E. Use S3 Transfer Acceleration to provide lower latency to users.

Correct Answer: BD
B:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ReadWriteCapacityMode.h
D: https://aws.amazon.com/blogs/compute/robust-serverless-application-design-with-aws-lambda-dlq/c