SAP-C02 Free Practice Test

- (Exam Topic 2)
A company wants to migrate its website from an on-premises data center onto AWS At the same time it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency The company's security policy states that privileges and network permissions must be configured according to best practice, using least privilege
A solutions architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster
What steps are required after the deployment to meet the requirements'? (Select TWO.)

1. A. Create tasks using the bridge network mode
2. B. Create tasks using the awsvpc network mode
3. C. Apply security groups to Amazon EC2 instances and use IAM roles for EC2 instances to access other resources
4. D. Apply security groups to the tasks, and pass IAM credentials into the container at launch time to access other resources
5. E. Apply security groups to the tasks; and use IAM roles for tasks to access other resources

Correct Answer: BE

- (Exam Topic 2)
A company hosts a web application on AWS in the us-east-1 Region. The application servers are distributed across three Availability Zones behind an Application Load Balancer The database is hosted in a MySQL database on an Amazon EC2 instance A solutions architect needs to design a cross-Region data recovery solution using AWS services with an RTO of less than 5 minutes and an RPO of less than 1 minute. The solutions architect is deploying application servers in us-west-2 and has configured Amazon Route 53 health checks and DNS failover to us-west-2.
Which additional step should the solutions architect take?

1. A. Migrate the database to an Amazon RDS for MySQL instance with a cross-Region read replica in us-west-2
2. B. Migrate the database to an Amazon Aurora global database with the primary in us-east-1 and the secondary in us-west-2
3. C. Migrate the database to an Amazon RDS for MySQL instance with a Multi-AZ deployment
4. D. Create a MySQL standby database on an Amazon EC2 instance in us-west-2

Correct Answer: C

- (Exam Topic 2)
A company is developing a new service that will be accessed using TCP on a static port A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name myservice.com, which is publicly accessible The service must use fixed address assignments so other companies can add the addresses to their allow lists.
Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will
meet these requirements?

1. A. Create Amazon EC2 instances with an Elastic IP address for each instance Create a Network Load Balancer (NLB) and expose the static TCP port Register EC2instances with the NLB Create a new name server record set named my service com, and assign the Elastic IP addresses of the EC2 instances to the record set Provide the Elastic IP addresses of the EC2 instances to the other companies to add to their allow lists
2. B. Create an Amazon ECS cluster and a service definition for the application Create and assign public IP addresses for the ECS cluster Create a Network Load Balancer (NLB) and expose the TCP port Create a target group and assign the ECS cluster name to the NLB Create a new A record set named my service com and assign the public IP addresses of the ECS cluster to the record set Provide the public IP addresses of the ECS cluster to the other companies to add to their allow lists
3. C. Create Amazon EC2 instances for the service Create one Elastic IP address for each Availability Zone Create a Network Load Balancer (NLB) and expose the assigned TCP port Assign the Elastic IP addresses to the NLB for each Availability Zone Create a target group and register the EC2 instances with the NLB Create a new A (alias) record set named my service com, and assign the NLB DNS name to the record set.
4. D. Create an Amazon ECS cluster and a service definition for the application Create and assign public IP address for each host in the cluster Create an Application Load Balancer (ALB) and expose the static TCP port Create a target group and assign the ECS service definition name to the ALB Create a new CNAME record set and associate the public IP addresses to the record set Provide the Elastic IP addresses of the Amazon EC2 instances to the other companies to add to their allow lists

Correct Answer: C

- (Exam Topic 1)
A solutions architect is designing the data storage and retrieval architecture for a new application that a company will be launching soon. The application is designed to ingest millions of small records per minute from devices all around the world. Each record is less than 4 KB in size and needs to be stored in a durable location where it can be retrieved with low latency. The data is ephemeral and the company is required to store the data for 120 days only, after which the data can be deleted.
The solutions architect calculates that, during the course of a year, the storage requirements would be about 10-15 TB.
Which storage strategy is the MOST cost-effective and meets the design requirements?

1. A. Design the application to store each incoming record as a single .csv file in an Amazon S3 bucket to allow for indexed retrieva
2. B. Configure a lifecycle policy to delete data older than 120 days.
3. C. Design the application to store each incoming record in an Amazon DynamoDB table properly configured for the scal
4. D. Configure the DynamoOB Time to Live (TTL) feature to delete records older than 120 days.
5. E. Design the application to store each incoming record in a single table in an Amazon RDS MySQL databas
6. F. Run a nightly cron job that executes a query to delete any records older than 120 days.
7. G. Design the application to batch incoming records before writing them to an Amazon S3 bucke
8. H. Update the metadata for the object to contain the list of records in the batch and use the Amazon S3 metadatasearch feature to retrieve the dat
9. I. Configure a lifecycle policy to delete the data after 120 days.

Correct Answer: B
DynamoDB with TTL, cheaper for sustained throughput of small items + suited for fast retrievals. S3 cheaper for storage only, much higher costs with writes. RDS not designed for this use case.

- (Exam Topic 2)
An online magazine will launch Its latest edition this month. This edition will be the first to be distributed globally. The magazine's dynamic website currently uses an Application Load Balancer in front of the web tier a fleet of Amazon EC2 instances for web and application servers, and Amazon Aurora MySQL. Portions of the website include static content and almost all traffic is read-only
The magazine is expecting a significant spike m internet traffic when the new edition is launched Optimal performance is a top priority for the week following the launch
Which combination of steps should a solutions architect take to reduce system response antes for a global audience? (Select TWO )

1. A. Use logical cross-Region replication to replicate the Aurora MySQL database to a secondary Region Replace the web servers with Amazon S3 Deploy S3 buckets in cross-Region replication mode
2. B. Ensure the web and application tiers are each m Auto Scaling group
3. C. Introduce an AWS Direct Connect connection Deploy the web and application tiers in Regions across the world
4. D. Migrate the database from Amazon Aurora to Amazon RDS for MySQ
5. E. Ensure all three of the application tiers—we
6. F. application, and database—are in private subnets.
7. G. Use an Aurora global database for physical cross-Region replicatio
8. H. Use Amazon S3 with cross-Region replication for static content and resource
9. I. Deploy the web and application tiers in Regions across the world
10. J. Introduce Amazon Route 53 with latency-based routing and Amazon CloudFront distribution
11. K. Ensure me web and application tiers are each in Auto Scaling groups

Correct Answer: DE