SAP-C02 Free Practice Test

- (Exam Topic 2)
A company is running a serverless application that consists of several AWS Lambda functions and Amazon DynamoDB tables. The company has created new functionality that requires the Lambda functions to access an Amazon Neptune DB cluster The Neptune DB cluster is located in three subnets in a VPC.
Which of the possible solutions will allow the Lambda functions to access the Neptune DB cluster and DynamoDB tables? (Select TWO )

1. A. Create three public subnets in the Neptune VPC and route traffic through an interne: gateway Host theLambda functions m the three new public subnets
2. B. Create three private subnets in the Neptune VPC and route internet traffic through a NAT gateway Host the Lambda functions In the three new private subnets.
3. C. Host the Lambda functions outside the VP
4. D. Update the Neptune security group to allow access from the IP ranges of the Lambda functions.
5. E. Host the Lambda functions outside the VP
6. F. Create a VPC endpoint for the Neptune database, and have the Lambda functions access Neptune over the VPC endpoint
7. G. Create three private subnets in the Neptune VP
8. H. Host the Lambda functions m the three new isolated subnet
9. I. Create a VPC endpoint for DynamoD
10. J. and route DynamoDB traffic to the VPC endpoint

Correct Answer: AC

- (Exam Topic 1)
A company wants to retire its Oracle Solaris NFS storage arrays. The company requires rapid data migration over its internet network connection to a combination of destinations for Amazon S3. Amazon Elastic File System (Amazon EFS), and Amazon FSx lor Windows File Server. The company also requires a full initial copy, as well as incremental transfers of changes until the retirement of the storage arrays. All data must be encrypted and checked for integrity.
What should a solutions architect recommend to meet these requirements?

1. A. Configure CloudEndur
2. B. Create a project and deploy the CloudEndure agent and token to the storage arra
3. C. Run the migration plan to start the transfer.
4. D. Configure AWS DataSyn
5. E. Configure the DataSync agent and deploy it to the local networ
6. F. Create a transfer task and start the transfer.
7. G. Configure the aws S3 sync comman
8. H. Configure the AWS client on the client side with credential
9. I. Run the sync command to start the transfer.
10. J. Configure AWS Transfer (or FT
11. K. Configure the FTP client with credential
12. L. Script the client to connect and sync to start the transfer.

Correct Answer: B

- (Exam Topic 2)
A company runs an application in the cloud that consists of a database and a website Users can post data to the website, have the data processed, and have the data sent back to them in an email. Data is stored in a MySQL database running on an Amazon EC2 instance The database is running in a VPC with two private subnets The website is running on Apache Tomcat in a single EC2 instance in a different VPC with one public subnet There is a single VPC peering connection between the database and website VPC.
The website has suffered several outages during the last month due to high traffic
Which actions should a solutions architect take to increase the reliability of the application? (Select THREE )

1. A. Place the Tomcat server in an Auto Scaling group with multiple EC2 instances behind an Application Load Balancer
2. B. Provision an additional VPC peering connection
3. C. Migrate the MySQL database to Amazon Aurora with one Aurora Replica
4. D. Provision two NAT gateways in the database VPC
5. E. Move the Tomcat server to the database VPC
6. F. Create an additional public subnet in a different Availability Zone in the website VPC

Correct Answer: ACF

- (Exam Topic 2)
A large company runs workloads in VPCs that are deployed across hundreds of AWS accounts Each VPC consists of public subnets and private subnets that span across multiple Availability Zones NAT gateways are deployed in the public subnets and allow outbound connectivity to the internet from the private subnets.
A solutions architect is working on a hub-and-spoke design. All private subnets in the spoke VPCs must route traffic to the internet through an egress VPC The solutions architect already has deployed a NAT gateway in an egress VPC in a central AWS account
Which set of additional steps should the solutions architect take to meet these requirements?

1. A. Create peering connections between the egress VPC and the spoke VPCs Configure the required routing to allow access to the internet
2. B. Create a transit gateway and share it with the existing AWS accounts Attach existing VPCs to the transit gateway Configure the required routing to allow access to the internet
3. C. Create a transit gateway in every account Attach the NAT gateway to the transit gateways Configure the required routing to allow access to the internet
4. D. Create an AWS PrivateLink connection between the egress VPC and the spoke VPCs Configure the required routing to allow access to the internet

Correct Answer: B

- (Exam Topic 2)
A company has loT sensors that monitor traffic patterns throughout a large city. The company wants to read and collect data from the sensors and perform aggregations on the data.
A solutions architect designs a solution in which the loT devices are streaming to Amazon Kinesis Data Streams. Several applications are reading from the stream. However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.
Which actions should the solutions architect take to resolve this issue? (Select THREE.)

1. A. Reshard the stream to increase the number of shards in the stream.
2. B. Use the Kinesis Producer Library (KPL). Adjust the polling frequency.
3. C. Use consumers with the enhanced fan-out feature.
4. D. Reshard the stream to reduce the number of shards in the stream.
5. E. Use an error retry and exponential backoff mechanism in the consumer logic.
6. F. Configure the stream to use dynamic partitioning.

Correct Answer: ACD