SAP-C02 Free Practice Test

- (Exam Topic 1)
A company is running an application on Amazon EC2 instances in three environments; development, testing, and production. The company uses AMIs to deploy the EC2 instances. The company builds the AMIs by using custom deployment scripts and infrastructure orchestration tools for each release in each environment.
The company is receiving errors in its deployment process. Errors appear during operating system package downloads and during application code installation from a third-party Git hosting service. The company needs deployments to become more reliable across all environments.
Which combination of steps will meet these requirements? (Select THREE).

1. A. Mirror the application code to an AWS CodeCommit Git repositor
2. B. Use the repository to build EC2 AMIs.
3. C. Produce multiple EC2 AMI
4. D. one for each environment, for each release.
5. E. Produce one EC2 AMI for each release for use across all environments.
6. F. Mirror the application code to a third-party Git repository that uses Amazon S3 storag
7. G. Use therepository for deployment.
8. H. Replace the custom scripts and tools with AWS CodeBuil
9. I. Update the infrastructure deployment process to use EC2 Image Builder.

Correct Answer: ACE

- (Exam Topic 2)
A data analytics company has an Amazon Redshift cluster that consists of several reserved nodes. The duster is experiencing unexpected bursts of usage because a team of employees is compiling a deep audit analysis report The queries to generate the report are complex read queries and are CPU intensive.
Business requirements dictate that the cluster must be able to service read and write queries at at) times A solutions architect must devise a solution that accommodates the bursts of usage
Which solution meets these requirements MOST cost-effectively?

1. A. Provision an Amazon EMR duster Offload the complex data processing tasks
2. B. Deploy an AWS Lambda function to add capacity to the Amazon Redshift cluster by using a classic resize operation when the duster's CPU metrics in Amazon CloudWatch reach 80%.
3. C. Deploy an AWS Lambda function to add capacity to the Amazon Redshift duster by using an elastic resize operation when the duster's CPU metrics in Amazon CloudWatch leach 80%.
4. D. Turn on the Concurrency Scaling feature for the Amazon Redshift duster

Correct Answer: D

- (Exam Topic 2)
A company has developed a web application. The company is hosting the application on a group of Amazon EC2 instances behind an Application Load Balancer. The company wants to improve the security posture of the application and plans to use AWS WAF web ACLs. The solution must not adversely affect legitimate traffic to the application.
How should a solutions architect configure the web ACLs to meet these requirements?

1. A. Set the action of the web ACL rules to Coun
2. B. Enable AWS WAF logging Analyze the requests for false positives Modify the rules to avoid any false positive Over time change the action of the web ACL rules from Count to Block.
3. C. Use only rate-based rules in the web ACL
4. D. and set the throttle limit as high as possible Temporarilyblock all requests that exceed the limi
5. E. Define nested rules to narrow the scope of the rate tracking.
6. F. Set the action o' the web ACL rules to Bloc
7. G. Use only AWS managed rule groups in the web ACLs Evaluate the rule groups by using Amazon CloudWatch metrics with AWS WAF sampled requests or AWS WAF logs.
8. H. Use only custom rule groups in the web ACL
9. I. and set the action to Allow Enable AWS WAF logging Analyze the requests tor false positives Modify the rules to avoid any false positive Over time, change the action of the web ACL rules from Allow to Block.

Correct Answer: B

- (Exam Topic 1)
A company has a project that is launching Amazon EC2 instances that are larger than required. The project's account cannot be part of the company's organization in AWS Organizations due to policy restrictions to keep this activity outside of corporate IT. The company wants to allow only the launch of t3.small EC2 instances by developers in the project's account. These EC2 instances must be restricted to the us-east-2 Region.
What should a solutions architect do to meet these requirements?

1. A. Create a new developer accoun
2. B. Move all EC2 instances, users, and assets into us-east-2. Add the account to the company's organization in AWS Organization
3. C. Enforce a tagging policy that denotes Region affinity.
4. D. Create an SCP that denies the launch of all EC2 instances except I3.small EC2 instances in us-east-2.Attach the SCP to the project's account.
5. E. Create and purchase a t3.small EC2 Reserved Instance for each developer in us-east-2. Assign each developer a specific EC2 instance with their name as the tag.
6. F. Create an IAM policy than allows the launch of only t3.small EC2 instances in us-east-2. Attach the policy to the roles and groups that the developers use in the project's account.

Correct Answer: D

- (Exam Topic 1)
A media company uses Amazon DynamoDB to store metadata for its catalog of movies that are available to stream. Each media item Contains user-facing content that concludes a description of the media, a list of search tags, and similar data. In addition, media items include a list of Amazon S3 key names that relate to movie files. The company stores these movie files in a single S3 bucket that has versioning enable. The company uses Amazon CloudFront to serve these movie files.
The company has 100.000 media items, and each media item can have many different S3 objects that represent different encodings of the same media S3 objects that belong to the same media item are grouped together under the same key prefix, which is a random unique ID
Because of an expiring contract with a media provider, the company must remove 2.000 media Items. The company must completely delete all DynamoDB keys and movie files on Amazon S3 that are related to these media items within 36 hours The company must ensure that the content cannot be recovered.
Which combination of actions will meet these requirements? (Select TWO.)

1. A. Configure the dynamoDB table with a TTL fiel
2. B. Create and invoke an AWS Lambda function to perform a conditional update Set the TTL field to the time of the contract's expiration on every affected media item.
3. C. Configure an S3 Lifecycle object expiration rule that is based on the contract's expiration date
4. D. Write a script to perform a conditional delete on all the affected DynamoDB records
5. E. Temporarily suspend versioning on the S3 bucke
6. F. Create and invoke an AWS Lambda function that deletes affected objects Reactivate versioning when the operation is complete
7. G. Write a script to delete objects from Amazon S3 Specify in each request a NoncurrentVersionExpiration property with a NoncurrentDays attribute set to 0.

Correct Answer: CE