ExpertAWS Solutions Architect Professional (SAP-C02)
AWS Solutions Architect Professional SAP-C02 Practice Exam 3
75 free questions · No sign-up required to browse
Comprehensive practice exam for AWS SAP-C02 covering organizational complexity, new solutions, continuous improvement, and migration.
75
Questions
Mixed
Difficulty
75%
Pass mark
Difficulty breakdown
Easy(10)
Medium(45)
Hard(20)
Topics covered
Browse all topics →Domain 1.1: Network ConnectivityDomain 1.2: Security ControlsDomain 1.3: Reliable ArchitecturesDomain 1.4: Multi-Account EnvironmentDomain 1.5: Cost OptimizationDomain 2.1: Deployment StrategyDomain 2.2: Business ContinuityDomain 2.3: Security ControlsDomain 2.4: ReliabilityDomain 2.5: PerformanceDomain 3.1: Operational ExcellenceDomain 3.2: Security ImprovementDomain 3.3: Performance ImprovementDomain 3.4: Reliability ImprovementDomain 3.5: Cost OptimizationDomain 4.1: Select Workloads for MigrationDomain 4.2: New Architecture DesignDomain 4.3: Migration StrategyDomain 4.4: Modernization Requirements
Sample questions
Q01Hard1 mark
An enterprise has 100 VPCs across 5 AWS Regions. They need to establish a highly available, transitive network architecture connecting all VPCs and three on-premises data centers. Which solution provides the MOST scalable architecture with the lowest operational overhead?
Q02Medium1 mark
A company uses AWS Organizations. The CISO requires that no EC2 instances can be launched outside of the us-east-1 and eu-west-1 regions across all 50 member accounts. How can this be enforced centrally?
Q03Hard1 mark
An application uses Amazon Aurora PostgreSQL. To meet disaster recovery requirements, the database must survive a region failure with an RPO of 1 second and RTO of 1 minute. Which architecture meets these requirements?
Q04Medium1 mark
A company is setting up a new multi-account AWS environment. They want to automate the creation of accounts with baseline security configurations, centralized logging, and pre-configured VPCs. Which AWS service is BEST suited for this?
Q05Medium1 mark
An organization wants to allocate AWS costs to specific departments. They use multiple AWS accounts. How can they ensure that specific tags are applied to all newly created EC2 instances to enable cost allocation?
Ready to Practice the full exam?
All 75 questions with worked answers, mark schemes, and AI tutoring.
All questions (75)
Free to browse · no sign-up requiredQ01An enterprise has 100 VPCs across 5 AWS Regions. They need to establish a highly available, transitive network archit...HardQ02A company uses AWS Organizations. The CISO requires that no EC2 instances can be launched outside of the us-east-1 an...MediumQ03An application uses Amazon Aurora PostgreSQL. To meet disaster recovery requirements, the database must survive a reg...HardQ04A company is setting up a new multi-account AWS environment. They want to automate the creation of accounts with base...MediumQ05An organization wants to allocate AWS costs to specific departments. They use multiple AWS accounts. How can they ens...MediumQ06A company is designing a CI/CD pipeline for a microservices architecture deployed on Amazon EKS. They need to ensure ...MediumQ07A financial institution requires that all EBS volumes, S3 buckets, and RDS databases are backed up daily. Backups mus...HardQ08An application stores sensitive PII in Amazon S3. Compliance requires that data is encrypted at rest using keys manag...MediumQ09A high-traffic e-commerce website experiences unpredictable traffic spikes. The backend uses an Auto Scaling group of...HardQ10A global media company serves video content to users worldwide. They need to minimize latency and reduce the load on ...MediumQ11An enterprise wants to improve operational excellence by automatically remediating unencrypted EBS volumes. Which sol...MediumQ12A security team needs to continuously monitor their AWS environment for malicious activity, unauthorized behavior, an...MediumQ13An architect is reviewing a legacy application running on m4.large EC2 instances. The application is CPU-bound and pe...MediumQ14A company wants to test the resilience of their microservices architecture by intentionally injecting faults, such as...EasyQ15A company has 500 TB of data in an S3 Standard bucket. Access patterns are unpredictable; some objects are accessed d...MediumQ16A company is planning to migrate 500 on-premises VMs to AWS. They need to discover dependencies, analyze utilization,...MediumQ17An architect is redesigning a monolithic on-premises application into microservices on AWS. The application currently...HardQ18A company needs to migrate a 50 TB Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downt...MediumQ19A company is modernizing a batch processing application. The application receives files in S3, processes them, and st...HardQ20A global enterprise requires a dedicated, private connection between their on-premises data center and AWS. They need...HardQ21An enterprise uses AWS Transit Gateway to connect 50 VPCs. They want to inspect all internet-bound traffic from these...HardQ22A company has a multi-account structure in AWS Organizations. They want to share a central AWS Transit Gateway with a...MediumQ23An architecture uses an Application Load Balancer (ALB) in front of an Auto Scaling group of EC2 instances. The secur...EasyQ24A company uses AWS IAM Identity Center (AWS SSO) for federation. They need to grant developers read-only access to pr...MediumQ25An application relies on an Amazon RDS for MySQL database. The business requires an RTO of 5 minutes and an RPO of 5 ...HardQ26A company is designing a multi-region active-active architecture for a stateless web application. They need to route ...MediumQ27An enterprise uses AWS Control Tower. They need to customize the account vending process to automatically deploy a sp...HardQ28A company has a centralized logging account. They want to ensure that AWS CloudTrail logs from all 100 member account...MediumQ29A company wants to purchase Compute Savings Plans to reduce costs. They have a multi-account structure with consolida...MediumQ30A development team uses AWS CDK to define infrastructure. They want to deploy a new serverless application across 3 A...MediumQ31A company is deploying a new application using Amazon ECS on Fargate. They need to implement a canary deployment stra...MediumQ32A critical database runs on Amazon EC2 with EBS volumes. The business requires application-consistent backups every 4...MediumQ33An architecture uses Amazon S3 to store critical documents. To meet compliance, the company must prove that documents...MediumQ34A web application is deployed across multiple AWS Regions. The security team wants to protect the application from SQ...MediumQ35An application needs to access database credentials. The security policy dictates that credentials must be rotated au...EasyQ36A microservices architecture uses synchronous API calls between services. When a downstream service experiences laten...HardQ37An order processing system receives bursts of traffic. Currently, the web tier writes directly to an RDS database, wh...MediumQ38A gaming application requires a database that can handle millions of read/write requests per second with single-digit...EasyQ39A high-performance computing (HPC) cluster runs on EC2 instances. The nodes need to communicate with each other with ...HardQ40An application uses Amazon DynamoDB. A specific read-heavy query is causing throttling and high costs. The data chang...MediumQ41A company wants to track the end-to-end latency of user requests as they travel through API Gateway, AWS Lambda, and ...EasyQ42An operations team manually patches 1,000 EC2 instances every month. They want to automate this process, ensuring pat...MediumQ43A company requires that all S3 buckets are private. If a developer accidentally makes a bucket public, it must be aut...MediumQ44A security audit reveals that IAM users have overly permissive policies. The security team wants to automatically ana...HardQ45An application runs on a fleet of EC2 instances. The CPU utilization averages 15%. The architect wants to right-size ...MediumQ46A company is migrating a legacy application to AWS. The application has hardcoded IP addresses and cannot support DNS...MediumQ47A company wants to migrate a massive 10 PB data archive from their on-premises SAN to Amazon S3 Glacier. Their intern...MediumQ48An architect is modernizing a monolithic application by breaking it into event-driven microservices. Service A needs ...MediumQ49A company is migrating a fleet of 500 VMware virtual machines to AWS. They want to perform a lift-and-shift migration...EasyQ50A company is designing a hybrid network architecture. They have two on-premises data centers and three AWS Regions. T...HardQ51An enterprise wants to enforce strict data perimeter controls. They must ensure that IAM principals in their organiza...HardQ52A company is designing a disaster recovery strategy for a critical application. The RTO is 4 hours and the RPO is 1 h...MediumQ53A company is setting up AWS Control Tower. They want to implement a shared services VPC for centralized Active Direct...MediumQ54An organization wants to optimize costs for their EC2 fleet. They have a baseline of steady-state usage and occasiona...EasyQ55A team is building a CI/CD pipeline for a serverless application using AWS SAM. They need to ensure that deployments ...MediumQ56An application requires highly available file storage accessible by hundreds of EC2 Linux instances across multiple A...EasyQ57A company needs to securely manage SSL/TLS certificates for their internal applications hosted on EC2 instances. The ...HardQ58An application uses Amazon Kinesis Data Streams to ingest telemetry data. During peak hours, the stream experiences P...MediumQ59A database migration requires moving a 5 TB MySQL database from on-premises to Amazon Aurora MySQL. The migration mus...HardQ60A company wants to improve the operational excellence of their serverless architecture (API Gateway, Lambda, DynamoDB...MediumQ61A security team wants to automate vulnerability management for their EC2 fleet. They need to scan instances weekly, a...MediumQ62An architect is optimizing a read-heavy web application backed by an Amazon RDS MySQL database. The database is exper...MediumQ63A company wants to improve the reliability of their application by implementing a multi-region active-passive archite...MediumQ64An organization is looking to identify cost optimization opportunities across their AWS accounts. They want to find u...EasyQ65A company is evaluating their application portfolio for migration to AWS. They want to use the '7 Rs' migration strat...MediumQ66An architect is designing a new serverless architecture for a web application. The frontend is a Single Page Applicat...MediumQ67A company is migrating a large on-premises NFS file share to AWS. They want to maintain the NFS interface for legacy ...MediumQ68An enterprise is modernizing their data analytics platform. They want to build a serverless data lake architecture. D...MediumQ69A company is designing a multi-account strategy. They want to isolate their production environment from development. ...EasyQ70An architect is designing a secure ingress architecture for a web application. They need to protect against DDoS atta...MediumQ71A company is migrating a legacy application that relies on multicast networking. AWS VPCs do not natively support mul...HardQ72An enterprise wants to establish a dedicated, private connection to AWS. They require high availability and encryptio...HardQ73A company is designing a highly resilient, multi-region architecture for a critical payment processing system. They n...HardQ74An organization is migrating a complex monolithic application to AWS. They have decided to use the Strangler Fig patt...MediumQ75A company wants to implement a robust cost optimization and visibility strategy across their 100 AWS accounts. Which ...Medium