Free Amazon SAP-C02 Exam Questions

Question 1

A company is using AWS CloudFormation as its deployment tool for all applications. It stages all application binaries and templates within Amazon S3 buckets with versioning enabled. Developers use an Amazon EC2 instance with IDE access to modify and test applications. The developers want to implement CI/CD with AWS CodePipeline with the following requirements: Use AWS CodeCommit for source control. Automate unit testing and security scanning. Alert developers when unit tests fail. Toggle application features and allow lead developer approval before deployment. Which solution will meet these requirements?

A : Use AWS CodeBuild for testing and scanning. Use EventBridge and SNS for alerts. Use AWS CDK with a manifest to toggle features. Use a manual approval stage.

B : Use Lambda for testing and alerts. Use AWS Amplify plugins for feature toggles. Use SES for manual approval.

C : Use Jenkins and SES for alerts. Use nested CloudFormation stacks for features. Use Lambda for approvals.

D : Use CodeDeploy for testing and scanning. Use CloudWatch alarms and SNS. Use Docker images for features and AWS CLI for toggles

Answer: A

Question 2

A company deployed a blockchain application in AWS a year ago using AWS Opsworks. There has been a lot of security patches lately for the underlying Linux servers of the blockchain application, which means that the Opsworks stack instances should be updated.

In this scenario, which of the following are the best practices when updating an AWS stack? (Select TWO.)

A : n the Update Dependencies stack command for Linux based instances.

B : Windows-based instances, run the Update Dependencies stack command.

C : lete the entire stack and create a new one.

D : CloudFormation to deploy the security patches.

E : WAF to deploy the security patches.

F : eate and start new instances to replace your current online instances. Then delete the current instances. The new instances will have the latest set of security patches installed during setup.

Answer: A

Question 3

A company has deployed a multi-tier web application on AWS that uses Compute Optimized Instances for server-side processing and Storage Optimized EC2 Instances to store various media files. To ensure data durability, there is a scheduled job that replicates the files to each EC2 instance. The current architecture worked for a few months but it started to fail as the number of files grew, which is why the management decided to redesign the system.

Which of the following options should the solutions architect implement in order to launch a new architecture with improved data durability and cost-efficiency?

A : grate and host the entire web application to Amazon S3 for a more cost-effective web hosting. Enable cross-region replication to improve data durability. Use a combination of Consolidated Billing and AWS Trusted advisor checks to monitor the operating costs and identify potential savings.

B : grate all media files to Amazon EFS then attach this new drive as a mount point to a new set of Storage Optimized EC2 Instances. For the web servers, set up an Elastic Load Balancer with an Auto Scaling of EC2 instances and use this as the origin for a new Amazon CloudFront web distribution. Use a combination of Cost Explorer and AWS Trusted advisor checks to monitor the operating costs and identify potential savings.

C : grate all media files to an Amazon S3 bucket and use this as the origin for the new CloudFront web distribution. Set up an Elastic Load Balancer with an Auto Scaling of EC2 instances to host the web servers. Use a combination of Cost Explorer and AWS Trusted advisor checks to monitor the operating costs and identify potential savings.

D : grate the web application to AWS Elastic Beanstalk and move all media files to Amazon EFS for a durable and scalable storage. Set up an Amazon CloudFront distribution with EFS as the origin. Use a combination of Consolidated Billing and AWS Trusted advisor checks to monitor the operating costs and identify potential savings.

Answer: C

Question 4

How can a company patch EC2 instanceswithout internet access, using apatch source in another account, while accessing Systems Manager and S3?

A : Custom VPN servers

B : Transit Gateway + private VIFs

C : VPC endpoints+VPC peeringwith patch source

D : Network ACLs + Transit Gateway

Answer: C

Question 5

A company is using AWS CloudFormation as its deployment tool for all applications. It stages all application binaries and templates within Amazon S3 buckets with versioning enabled. Developers use an Amazon EC2 instance with IDE access to modify and test applications. The developers want to implement CI/CD with AWS CodePipeline with the following requirements: Use AWS CodeCommit for source control. Automate unit testing and security scanning. Alert developers when unit tests fail. Toggle application features and allow lead developer approval before deployment. Which solution will meet these requirements?

A : Use AWS CodeBuild for testing and scanning. Use EventBridge and SNS for alerts. Use AWS CDK with a manifest to toggle features. Use a manual approval stage.

B : Use Lambda for testing and alerts. Use AWS Amplify plugins for feature toggles. Use SES for manual approval.

C : Use Jenkins and SES for alerts. Use nested CloudFormation stacks for features. Use Lambda for approvals.

D : Use CodeDeploy for testing and scanning. Use CloudWatch alarms and SNS. Use Docker images for features and AWS CLI for toggles

Answer: A