AWS Solutions Architect Professional SAP-C02 Practice Exam 5

A global enterprise is redesigning its AWS network architecture across 50 AWS accounts and 3 AWS Regions. They currently use VPC peering, which has become unmanageable. The new architecture must support transitive routing, centralized outbound internet access, and dedicated hybrid connectivity to two on-premises data centers via AWS Direct Connect. Which solution meets these requirements with the LEAST operational overhead?

A company uses AWS Organizations to manage multiple accounts. The security team mandates that no Amazon S3 buckets can be made public, and all EBS volumes must be encrypted. Developers need the ability to manage their own IAM roles, but must not be able to bypass these security controls. Which combination of actions should the Solutions Architect take? (Select TWO)

A financial institution requires a disaster recovery strategy for its critical trading application. The application uses Amazon Aurora PostgreSQL and EC2 instances in an Auto Scaling group. The business requires an RPO of 1 second and an RTO of less than 1 minute. The solution must be highly available across two AWS Regions. Which architecture meets these requirements?

An enterprise is setting up a new multi-account AWS environment using AWS Control Tower. They need to provision isolated environments for 50 different development teams. Each team requires a standard set of VPCs, IAM roles, and security tools. The provisioning process must be automated and self-service for the team leads. Which approach is MOST operationally efficient?

A company has a complex AWS environment with hundreds of linked accounts under AWS Organizations. The CFO wants to allocate costs to specific business units (BUs). However, many resources are shared across BUs, such as Transit Gateways and central logging buckets. How can the Solutions Architect provide accurate cost allocation for both dedicated and shared resources?