Free Amazon SAP-C02 Exam Questions

Question 1

A company is using AWS to develop and manage its production web application. The application includes anAmazon API Gateway HTTP API that invokes an AWS Lambda function. The Lambda function processesand then stores data in a database.The company wants to implement user authorization for the web application in an integrated way. Thecompany already uses a third-party identity provider that issues OAuth tokens for the company's otherapplications.Which solution will meet these requirements?

A : Integrate the company's third-party identity provider with API Gateway. Configure an API GatewayLambda authorizer to validate tokens from the identity provider. Require the Lambda authorizer on allAPI routes. Update the web application to get tokens from the identity provider and include the tokensin the Authorization header when calling the API Gateway HTTP API.

B : Integrate the company's third-party identity provider with AWS Directory Service. Configure DirectoryService as an API Gateway authorizer to validate tokens from the identity provider. Require theDirectory Service authorizer on all API routes. Configure AWS IAM Identity Center as a SAML 2.0identity provider. Configure the web application as a custom SAML 2.0 application.

C : Integrate the company's third-party identity provider with AWS IAM Identity Center. Configure APIGateway to use IAM Identity Center for zero-configuration authentication and authorization. Updatethe web application to retrieve AWS STS tokens from IAM Identity Center and include the tokens inthe Authorization header when calling the API Gateway HTTP API.

D : Integrate the company's third-party identity provider with AWS IAM Identity Center. Configure IAMusers with permissions to call the API Gateway HTTP API. Update the web application to extractrequest parameters from the IAM users and include the parameters in the Authorization header whencalling the API Gateway HTTP API.

Answer: A

Question 2

A company runs an application on Amazon EC2 and AWS Lambd a. The application stores temporary data in Amazon 53. The 53 objects are deleted after 24 hours. The company deploys new versions of the application by launching AWS CloudFormation stacks. The stacks create the required resources. After validating a new version, the company deletes the old stack. The deletion of an old development stack recently failed. A solutions architect needs to resolve this Issue without major architecture changes. Which solution will meet these requirements?

A : Create a Lambda function to delete objects from an 53 bucket. Add the Lambda function as acustom resource in the CloudFormation stack with a DependsOn attribute that points to the S3 bucket resource.

B : Modify the CkxidFormatton stack to attach a DeletionPolicy attribute with a value of Delete to the S3 bucket.

C : Update the CloudFormation stack to add a DeletionPolicy attribute with a value of Snapshot for the S3 bucket resource.

D : Update the CloudFormation template to create an Amazon EFS file system to store temporary files Instead of Amazon S3. Configure the Lambda functions to run in the same VPC as the EFS file system

Answer: A

Question 3

A company is migrating its on-premises file transfer solution to AWS Transfer Family. The current system includes an SFTP server, a transformation application, and a messaging server. Transformations run every 5 minutes and notify the messaging server when complete. The company wants to simplify and reduce operational overhead.

A : Use Amazon EFS and a cron job to perform the transformations. Notify using SNS.

B : Use Amazon EMR to perform the transformations and notify via SNS.

C : Use Amazon S3 as storage with AWS Glue triggered by S3 events for transformations, and notify via SQS.

D : Use Amazon EFS with a time-based AWS Glue job every 5 minutes.

Answer: C

Question 4

A solutions architect is evaluating the reliability of a recently migrated application running on AWS. The front end is hosted on Amazon S3 and accelerated by Amazon CloudFront. The application layer is running in a stateless Docker container on an Amazon EC2 On-Demand Instance with an Elastic IP address. The storage layer is a MongoDB database running on an EC2 Reserved Instance in the same Availability Zone as the application layer. Which combination of steps should the solutions architect take to eliminate single points of failure with minimal application code changes? (Select TWO.)

A : eate a REST API in Amazon API Gateway and use AWS Lambda functions as the application layer.

B : eate an Application Load Balancer and migrate the Docker container to AWS Fargate.

C : grate the storage layer to Amazon DynamoD8.

D : grate the storage layer to Amazon DocumentD8 (with MongoDB compatibility).

E : eate an Application Load Balancer and move the storage layer to an EC2 Auto Scaling group.

Answer: B,D

Question 5

A company recently completed a successful proof of concept of Amazon Workspaces. A solutions architect needs to make the solution highly available across two AWS Regions. Amazon Workspaces is deployed in a failover Region, and a hosted zone is deployed in Amazon Route 53. What should the solutions architect do to configure high availability for the solution?

A : Create a connection alias in the primary Region and in the failover Region. Associate the connection aliases with a directory in each Region. Create a Route 53 failover routing policy. Set Evaluate Target Health to Yes.

B : Create a connection alias in the primary Region and in the failover Region. Associate the connection aliases with a directory in the primary Region. Create a Route 53 multivalue answer routing policy.

C : Create a connection alias in the primary Region. Associate the connection alias with a directory in the primary Region. Create a Route 53 weighted routing policy.

D : Create a connection alias in the primary Region. Associate the connection alias with a directory in the failover Region. Create a Route 53 failover routing policy. Set Evaluate Target Health to Yes.

Answer: A