McAfee Secure

Amazon AWS Certified Solutions Architect - Professional SAP-C02 Bundle

Exam Code: AWS Certified Solutions Architect - Professional SAP-C02

Exam Name AWS Certified Solutions Architect - Professional SAP-C02

Certification Provider: Amazon

Corresponding Certification: AWS Certified Solutions Architect - Professional

Amazon AWS Certified Solutions Architect - Professional SAP-C02 Bundle $23.86

100% Amazon AWS Certified Solutions Architect - Professional SAP-C02 Guaranteed Success With Testking Training Materials

Get Real AWS Certified Solutions Architect - Professional SAP-C02 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

  • Questions & Answers

    AWS Certified Solutions Architect - Professional SAP-C02 Questions & Answers

    515 Questions & Answers

    The ultimate exam preparation tool, Questions & Answers mirrors the actual AWS Certified Solutions Architect - Professional SAP-C02 exam while allowing you to hone and measure every aspect of your test-taking ability.

  • AWS Certified Solutions Architect - Professional SAP-C02 Video Course

    AWS Certified Solutions Architect - Professional SAP-C02 Training Course

    192 Video Lectures

    AWS Certified Solutions Architect - Professional SAP-C02 Video Course is developed by Amazon Professionals to help you pass the AWS Certified Solutions Architect - Professional SAP-C02 exam.

    Description

    This course will improve your knowledge and skills required to pass AWS Certified Solutions Architect - Professional SAP-C02 exam.
  • Study Guide

    AWS Certified Solutions Architect - Professional SAP-C02 Study Guide

    1066 PDF Pages

    Developed by industry experts, this 1066-page guide spells out in painstaking detail all of the information you need to ace AWS Certified Solutions Architect - Professional SAP-C02 exam.

AWS Certified Solutions Architect - Professional SAP-C02 Practice Tests

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Total Cost: $184.97
Bundle Price: $161.11

Purchase Individually

  • Questions & Answers

    Questions & Answers

    515 Questions

    $124.99
  • AWS Certified Solutions Architect - Professional SAP-C02 Video Course

    Training Course

    192 Video Lectures

    $29.99
  • Study Guide

    Study Guide

    1066 PDF Pages

    $29.99

Amazon AWS Certified Solutions Architect - Professional SAP-C02 Practice Test 88

Question 870

An enterprise architecture team faces this design requirement: Order processing must survive transient database outages without permanently losing accepted incoming work. What should the solutions architect recommend?

  1. Place an SQS queue between submission and processing, with appropriately scaled consumers and DLQ policy
  2. Enable EventBridge event-bus archive and replay for eligible matching events
  3. Deploy organization-managed AWS Config rules and targeted auto-remediation through approved Systems Manager Automation
  4. Adopt an Aurora Global Database topology where supported and rehearse cross-Region failover or switchover

Explanation

Correct Answer

A:

Durable queues decouple intake availability from downstream processing failures. The required architecture outcome is: Order processing must survive transient database outages without permanently losing accepted incoming work. Validate this choice by checking that Accepted messages remain durable during database downtime and are eventually processed when consumers recover.

Incorrect Answers

B:

No archive or retention mechanism was configured before the subscriber outage. The specific problem here is that synchronous request-to-database coupling loses or rejects work whenever the database is unavailable.

C:

Per-account one-off inspections do not continuously evaluate drift across accounts. The specific problem here is that synchronous request-to-database coupling loses or rejects work whenever the database is unavailable.

D:

A single-Region Aurora cluster lacks a suitable crossregional disaster recovery target. The specific problem here is that synchronous request-to-database coupling loses or rejects work whenever the database is unavailable.

Question 871

A deployed environment still does not meet the original requirement: A container service must restore capacity after an AZ outage without manually replacing individual EC2 instances. Which underlying cause should be investigated first?

  1. Every component must be rebuilt from scratch after failure, despite a tighter RTO
  2. A single active Region was incorrectly advertised as having near-zero recovery time
  3. All containers share a single placement failure domain and cannot be rescheduled in time
  4. Instance capacity is pinned to one zone with no automated target recovery

Explanation

Correct Answer

C:

This is the technical design error aligned with the unmet requirement. Multi-AZ task placement and auto healing support zonal continuity for stateless applications. The appropriate correction is: Run service tasks across multiple AZs with compatible load balancing and spare or scaling capacity. The control should then be tested by verifying that The load balancer continues serving from healthy remaining tasks during a forced zone failure.

Incorrect Answers

A:

Every component must be rebuilt from scratch after failure, despite a tighter RTO. The stated evidence instead indicates: All containers share a single placement failure domain and cannot be rescheduled in time.

B:

A single active Region was incorrectly advertised as having near-zero recovery time. The stated evidence instead indicates: All containers share a single placement failure domain and cannot be rescheduled in time.

D:

Instance capacity is pinned to one zone with no automated target recovery. The stated evidence instead indicates: All containers share a single placement failure domain and cannot be rescheduled in time.

Question 872

A deployed environment still does not meet the original requirement: A headquarters requires a resilient private link to workloads in two Regions and must avoid routing all traffic over the public internet. Which underlying cause should be investigated first?

  1. On-premises DNS has no forwarding path into the VPC's Route 53 Resolver
  2. A broad VPC peering link was used where a service-scoped private access path was needed
  3. A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure
  4. An overly broad assumed-role session is not constrained to the vendor's assigned resources

Explanation

Correct Answer

C:

This is the technical design error aligned with the unmet requirement. Independent Direct Connect circuits and correctly associated gateways improve hybrid-path resiliency. The appropriate correction is: Provision redundant Direct Connect connections and a Direct Connect gateway associated with appropriate transit or virtual private gateways. The control should then be tested by verifying that Both circuits carry permitted private routes, and a deliberate single-circuit outage retains connectivity.

Incorrect Answers

A:

On-premises DNS has no forwarding path into the VPC's Route 53 Resolver. The stated evidence instead indicates: A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure.

B:

A broad VPC peering link was used where a service-scoped private access path was needed. The stated evidence instead indicates: A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure.

D:

An overly broad assumed-role session is not constrained to the vendor's assigned resources. The stated evidence instead indicates: A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure.

Question 873

For the enterprise requirement "A brownfield workload must shift gradually from a legacy load balancer to a new service while preserving rollback", the team implemented this change: Use weighted Route 53 or application load balancer traffic shifting with monitored cutover and rollback criteria. Which outcome is the most meaningful acceptance test?

  1. The abusive source crosses its request threshold and is blocked without blocking allowed sample traffic
  2. Identical input configurations yield reviewed deployment changes and detectable drift rather than ad hoc resources
  3. Small traffic shares move to the new stack first; an error alarm redirects traffic to the proven stack
  4. Requests switch to the replacement environment only after health tests pass, and rollback returns traffic to old targets

Explanation

Correct Answer

C:

This measures the behavior required by the specific solution, rather than simply checking that it was configured. Weighted routing can support staged migration when health checks and client caching are considered. The acceptance condition is linked directly to the scenario: A brownfield workload must shift gradually from a legacy load balancer to a new service while preserving rollback.

Incorrect Answers

A:

The abusive source crosses its request threshold and is blocked without blocking allowed sample traffic. However, this does not establish the required outcome: small traffic shares move to the new stack first; an error alarm redirects traffic to the proven stack.

B:

Identical input configurations yield reviewed deployment changes and detectable drift rather than ad hoc resources. However, this does not establish the required outcome: small traffic shares move to the new stack first; an error alarm redirects traffic to the proven stack.

D:

Requests switch to the replacement environment only after health tests pass, and rollback returns traffic to old targets. However, this does not establish the required outcome: small traffic shares move to the new stack first; an error alarm redirects traffic to the proven stack.

Question 874

An enterprise architecture team faces this design requirement: Two regional Transit Gateways must exchange approved network prefixes without provisioning a separate VPC-to-VPC peering mesh. What design change should the team implement?

  1. Provision redundant Direct Connect connections and a Direct Connect gateway associated with appropriate transit or virtual private gateways
  2. Attach the VPCs to one centrally governed Transit Gateway and propagate approved attachment routes
  3. Establish a Transit Gateway peering attachment and add the appropriate static routes in both Transit Gateway route tables
  4. Update the key policy and consumer IAM permissions for the cross-account principal, alongside S3 access authorization

Explanation

Correct Answer

C:

Transit Gateway peering requires explicit routing between the regional gateways. The required architecture outcome is: Two regional Transit Gateways must exchange approved network prefixes without provisioning a separate VPC-to-VPC peering mesh. Validate this choice by checking that Traffic crosses the regional peering attachment only for specifically installed and approved prefixes.

Incorrect Answers

A:

A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure. The specific problem here is that the architecture assumes that Transit Gateway peering automatically propagates interregional routes.

B:

Separate point-to-point VPC peering connections lack transitive routing and are difficult to govern at scale. The specific problem here is that the architecture assumes that Transit Gateway peering automatically propagates interregional routes.

D:

The remote principal has S3 object access but lacks required key-policy and IAM decrypt permission. The specific problem here is that the architecture assumes that Transit Gateway peering automatically propagates interregional routes.

Question 875

For the enterprise requirement "A transaction platform must recover within minutes but budget constraints prohibit active-active processing in both Regions", the team implemented this change: Design a warm-standby secondary Region with continuously updated state and reduced steady-state capacity. Which test result proves this architecture satisfies its stated constraint?

  1. Eligible new source objects replicate with appropriate destination encryption and remain readable during source outage
  2. The load balancer continues serving from healthy remaining tasks during a forced zone failure
  3. A regional drill scales warm standby to full capacity within the stated recovery time and data tolerance
  4. Free storage stays above emergency thresholds while capacity grows within policy rather than being oversized initially

Explanation

Correct Answer

C:

This measures the behavior required by the specific solution, rather than simply checking that it was configured. Warm standby keeps a functional smaller recovery environment ready for rapid scaling. The acceptance condition is linked directly to the scenario: A transaction platform must recover within minutes but budget constraints prohibit active-active processing in both Regions.

Incorrect Answers

A:

Eligible new source objects replicate with appropriate destination encryption and remain readable during source outage. However, this does not establish the required outcome: a regional drill scales warm standby to full capacity within the stated recovery time and data tolerance.

B:

The load balancer continues serving from healthy remaining tasks during a forced zone failure. However, this does not establish the required outcome: a regional drill scales warm standby to full capacity within the stated recovery time and data tolerance.

D:

Free storage stays above emergency thresholds while capacity grows within policy rather than being oversized initially. However, this does not establish the required outcome: a regional drill scales warm standby to full capacity within the stated recovery time and data tolerance.

Question 876

A professional architect is reviewing two independent workstreams. Requirement A: A build system hosted outside AWS needs temporary access to deploy CloudFormation without storing long-lived access keys. Requirement B: An internet service must survive one Availability Zone failure while adjusting to fluctuating weekday usage. Which TWO architecture changes cover both acceptance criteria?

  1. Define API Gateway throttling limits and usage or monitoring controls that match allowed request rates
  2. Move the secret to AWS Secrets Manager and adopt controlled retrieval and rotation integration
  3. Use an Application Load Balancer with Auto Scaling groups spanning multiple AZs and health checks
  4. Configure IAM role federation with OIDC trust subject restrictions for the external build identity
  5. Apply S3 Intelligent-Tiering with suitable monitoring and eligibility checks

Explanation

Correct Answers

C:

This action meets the independently stated requirement B: An internet service must survive one Availability Zone failure while adjusting to fluctuating weekday usage. Multi-AZ target placement and health-driven scaling provide elastic zonal resilience. A direct acceptance check is: Terminating all instances in one zone leaves healthy targets and Auto Scaling replaces lost capacity.

D:

This action meets the independently stated requirement A: A build system hosted outside AWS needs temporary access to deploy CloudFormation without storing long-lived access keys. OIDC role federation supports temporary credentials and scoped trust for external workloads. A direct acceptance check is: The approved CI workload receives short-lived role credentials and an unapproved repository identity fails assumption.

Incorrect Answers

A:

This action targets a different technical need: A shared API must protect downstream capacity during a request spike without losing monitoring of throttled clients. It does not replace either required solution in A or B. API Gateway throttle controls bound request rates but callers should handle 429 responses; verify the two stated requirements independently rather than accepting an unrelated change.

B:

This action targets a different technical need: A service currently stores a database password in deployment environment text and needs managed rotation without code updates. It does not replace either required solution in A or B. Secrets Manager can store and rotate secrets with applications retrieving current authorized values; verify the two stated requirements independently rather than accepting an unrelated change.

E:

This action targets a different technical need: Unpredictably accessed objects are retained for a year, but no reliable access-frequency segmentation is known. It does not replace either required solution in A or B. S3 Intelligent-Tiering can move eligible objects among access tiers based on access frequency; verify the two stated requirements independently rather than accepting an unrelated change.

Question 877

For the enterprise requirement "A latency-sensitive API running in EKS cannot tolerate a single Availability Zone outage", the team implemented this change: Distribute worker nodes and eligible pods across multiple AZs with topology rules and disruption-aware service routing. Which evidence confirms the intended behavior under test?

  1. The selected time window can be replayed to the target bus without inventing events that were never archived
  2. Employees sign in using enterprise identities and receive only the mapped roles in assigned accounts
  3. Draining all nodes in one zone still leaves enough healthy replicas serving traffic from others
  4. Writes in either Region replicate to the other and conflict handling matches the business design

Explanation

Correct Answer

C:

This measures the behavior required by the specific solution, rather than simply checking that it was configured. Multi-AZ Kubernetes workloads need scheduled replicas and correctly configured networking across zones. The acceptance condition is linked directly to the scenario: A latency-sensitive API running in EKS cannot tolerate a single Availability Zone outage.

Incorrect Answers

A:

The selected time window can be replayed to the target bus without inventing events that were never archived. However, this does not establish the required outcome: draining all nodes in one zone still leaves enough healthy replicas serving traffic from others.

B:

Employees sign in using enterprise identities and receive only the mapped roles in assigned accounts. However, this does not establish the required outcome: draining all nodes in one zone still leaves enough healthy replicas serving traffic from others.

D:

Writes in either Region replicate to the other and conflict handling matches the business design. However, this does not establish the required outcome: draining all nodes in one zone still leaves enough healthy replicas serving traffic from others.

Question 878

A deployed environment still does not meet the original requirement: A Kinesis stream has adequate shard write capacity but multiple consumers compete for read throughput and fall behind. What design flaw is the best match for the reported condition?

  1. On-demand initialization latency is not addressed for the critical invocation path
  2. Shared per-shard read throughput is divided among too many polling consumers
  3. Capacity planning ignores demand spikes or hot keys that concentrate requests
  4. Config findings are left as unactioned notifications while risky drift remains exposed

Explanation

Correct Answer

B:

This is the technical design error aligned with the unmet requirement. Kinesis enhanced fan-out provides dedicated consumer read throughput within service limits. The appropriate correction is: Use enhanced fan-out for supported registered consumers or otherwise allocate read capacity explicitly. The control should then be tested by verifying that Each registered consumer receives an independent read-throughput path and lag falls during peak events.

Incorrect Answers

A:

On-demand initialization latency is not addressed for the critical invocation path. The stated evidence instead indicates: Shared per-shard read throughput is divided among too many polling consumers.

C:

Capacity planning ignores demand spikes or hot keys that concentrate requests. The stated evidence instead indicates: Shared per-shard read throughput is divided among too many polling consumers.

D:

Config findings are left as unactioned notifications while risky drift remains exposed. The stated evidence instead indicates: Shared per-shard read throughput is divided among too many polling consumers.

Question 879

A deployed environment still does not meet the original requirement: A transactional RDS workload must automatically fail over within the Region on an AZ failure. What was most likely overlooked in the original design?

  1. Single-AZ database storage and compute are a single zonal failure domain
  2. The team assumes an x86 machine image and native binaries can run unchanged on arm64
  3. No event archive exists to replay notifications that failed during downstream processing
  4. DNS simple routing cannot automatically reflect the application's health

Explanation

Correct Answer

A:

This is the technical design error aligned with the unmet requirement. RDS Multi-AZ provides standby capacity for automated intra-Region failover, not read scaling by itself. The appropriate correction is: Deploy a supported RDS Multi-AZ configuration and verify connection retry and DNS handling. The control should then be tested by verifying that Zonal failover promotes a standby and the application reconnects after the expected interruption.

Incorrect Answers

B:

The team assumes an x86 machine image and native binaries can run unchanged on arm64. The stated evidence instead indicates: Single-AZ database storage and compute are a single zonal failure domain.

C:

No event archive exists to replay notifications that failed during downstream processing. The stated evidence instead indicates: Single-AZ database storage and compute are a single zonal failure domain.

D:

DNS simple routing cannot automatically reflect the application's health. The stated evidence instead indicates: Single-AZ database storage and compute are a single zonal failure domain.

Question 880

An enterprise architecture team faces this design requirement: Multiple production CloudFormation stacks are routinely modified directly in the console after deployment. Which architecture decision best meets that precise requirement?

  1. Add AWS Config evaluation for the risky security-group condition with controlled notification and remediation
  2. Run CloudFormation drift detection with planned change sets and reconcile unintended differences
  3. Instrument eligible application components with AWS X-Ray tracing or supported distributed tracing correlation
  4. Integrate AWS Health organizational events with EventBridge alerts and owner routing

Explanation

Correct Answer

B:

CloudFormation drift assessment detects deviations from supported template-managed resource properties. The required architecture outcome is: Multiple production CloudFormation stacks are routinely modified directly in the console after deployment. Validate this choice by checking that Deliberately changed parameters are reported as drift and corrected through approved IaC updates.

Incorrect Answers

A:

Static security policy documents are not technically enforced against resource drift. The specific problem here is that console edits accumulate because no one compares deployed state with infrastructure definitions.

C:

Uncorrelated logs hide where the end-to-end latency accumulates. The specific problem here is that console edits accumulate because no one compares deployed state with infrastructure definitions.

D:

Service-specific Health notifications are not routed into incident processes. The specific problem here is that console edits accumulate because no one compares deployed state with infrastructure definitions.