SAP-C02 — Most Debated Topics

Community-voted ranking of 119 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
Modernize centralized firewall appliances with a Gateway Load Balancer and Auto Scaling
S-Grade Dispute: 55% 25 comments
#2
Use Lambda over a CloudWatch Logs stream to count unique users per client
S-Grade Dispute: 50% 13 comments
#3
Serve global game assets with Route 53 latency records and health checks
S-Grade Dispute: 48% 20 comments
#4
Reach a cross-account S3 data lake through a gateway endpoint and an access point bucket policy
S-Grade Dispute: 47% 18 comments
#5
Centralized billing and service governance for LOB accounts with Organizations and SCPs
S-Grade Dispute: 43% 26 comments
#6
Enrich IoT data with Lambda through Kinesis Data Firehose buffering
S-Grade Dispute: 43% 19 comments
#7
Split a central Cost and Usage Report per account with an S3 event and Lambda
S-Grade Dispute: 41% 18 comments
#8
Mount the S3 pricing file with Mountpoint for Amazon S3 to eliminate stale pricing
S-Grade Dispute: 39% 13 comments
#9
Combine S3 Multi-Region Access Points with Direct Connect and PrivateLink
S-Grade Dispute: 37% 11 comments
#10
Cost-optimizing short-lived contest workloads with DynamoDB TTL and Lambda
S-Grade Dispute: 35% 21 comments
#11
Collect on-premises discovery data with the Application Discovery Agent for Migration Hub
S-Grade Dispute: 35% 16 comments
#12
Use a Storage Gateway tape gateway to reach on-premises tape from AWS
S-Grade Dispute: 34% 18 comments
#13
Connecting 50 growing VPCs and exposing license validation via PrivateLink
S-Grade Dispute: 33% 14 comments
#14
Correct the cross-account role trust policy after recreating a role with CloudFormation
S-Grade Dispute: 33% 14 comments
#15
Add RDS Proxy and provisioned concurrency to bursty serverless Lambda functions
S-Grade Dispute: 33% 11 comments
#16
Reducing cross-Region S3 upload lag by using regional buckets and replication
S-Grade Dispute: 32% 27 comments
#17
EFS Multi-AZ with cross-Region replication for a shared Linux application dataset
S-Grade Dispute: 32% 12 comments
#18
Fixing false-positive health checks and database load with a simple health check and ElastiCache
S-Grade Dispute: 30% 18 comments
#19
Reduce scale-out latency with warm pools and lifecycle hooks on a mixed-instances group
S-Grade Dispute: 30% 10 comments
#20
Protecting an S3 bucket from deletion by leaked long-term credentials using Object Lock
S-Grade Dispute: 29% 13 comments
#21
Migrating an Aurora MySQL cluster to another account with minimal interruption
S-Grade Dispute: 29% 11 comments
#22
Serverless sensor ingestion with Firehose, Lambda, S3, and Athena
S-Grade Dispute: 26% 15 comments
#23
Configure cross-Region WorkSpaces redirection with connection aliases and Route 53 failover
S-Grade Dispute: 26% 13 comments
#24
Enabling an EC2 transparent proxy by disabling source/destination checks
S-Grade Dispute: 25% 9 comments
#25
Use RDS Proxy to absorb Lambda connection bursts against RDS for PostgreSQL
S-Grade Dispute: 25% 17 comments
#26
Combine Lambda provisioned concurrency, RDS Reserved Instances, and WAF on CloudFront
S-Grade Dispute: 25% 12 comments
#27
Cut Java Lambda cold starts with SnapStart and move non-deterministic code into handlers
S-Grade Dispute: 24% 11 comments
#28
Provisioning IoT devices with a pre-provisioning hook that validates the X.509 serial number
S-Grade Dispute: 23% 10 comments
#29
Collecting VM network dependency diagrams with the Application Discovery Agent
S-Grade Dispute: 21% 11 comments
#30
Add a static Site-to-Site VPN as the resilient backup path to a 1 Gbps Direct Connect link
S-Grade Dispute: 21% 15 comments
#31
Replace a single web instance with an Auto Scaling group and Aurora read replicas
S-Grade Dispute: 21% 14 comments
#32
Running EKS control plane and data plane on premises with an Outposts local cluster
S-Grade Dispute: 20% 20 comments
#33
Use AWS Cost Anomaly Detection with an AWS services monitor to pinpoint waste
S-Grade Dispute: 20% 18 comments
#34
Use Amazon MemoryDB for Redis in Multi-AZ mode for a real-time game leaderboard
S-Grade Dispute: 20% 7 comments
#35
Publish SES event logs to S3 through Data Firehose and query them with Athena
S-Grade Dispute: 20% 9 comments
#36
Trigger instance cleanup from the Trusted Advisor cost optimization check via EventBridge
S-Grade Dispute: 20% 10 comments
#37
Bringing a manually created VPC under CloudFormation management via resource import
S-Grade Dispute: 19% 14 comments
#38
Migrate .NET Framework applications to Elastic Beanstalk with the Web Application Migration Assistant
S-Grade Dispute: 19% 12 comments
#39
Share a Transit Gateway through AWS RAM for cross-account Aurora connectivity
S-Grade Dispute: 18% 14 comments
#40
Allocating per-tenant DynamoDB cost with the least operational effort
S-Grade Dispute: 17% 9 comments
#41
Connecting global WAN to data in multiple Regions over Direct Connect Gateway
S-Grade Dispute: 15% 10 comments
#42
Modernize a three-tier web application with S3 static hosting, Elastic Beanstalk, and Aurora
S-Grade Dispute: 15% 13 comments
#43
Create an hourly EFS backup plan with a dedicated IAM role for a 100-minute RPO
S-Grade Dispute: 13% 9 comments
#44
Restrict Amazon WorkSpaces access with an IP access control group
S-Grade Dispute: 13% 13 comments
#45
Empty an S3 bucket with a Lambda-backed CloudFormation custom resource before stack deletion
S-Grade Dispute: 12% 14 comments
#46
Cut S3 video costs by expiring incomplete multipart uploads and using S3 Standard-IA after 180 days
S-Grade Dispute: 12% 10 comments
#47
Peer each application VPC directly to the single target VPC in the other Region
S-Grade Dispute: 12% 5 comments
#48
Publish on-premises TCP services to AWS customers through a PrivateLink endpoint service
S-Grade Dispute: 11% 11 comments
#49
Layer WAF, Inspector, and GuardDuty across an API Gateway API and a legacy EC2 API
S-Grade Dispute: 11% 7 comments
#50
Continuously scan EKS nodes and ECR images with Amazon Inspector
S-Grade Dispute: 10% 12 comments
#51
Increase the Auto Scaling health check grace period for slow-starting instances
S-Grade Dispute: 10% 6 comments
#52
Use AWS Config remediation with EBS encryption by default to fix and prevent unencrypted volumes
S-Grade Dispute: 10% 8 comments
#53
Hardening a CloudFront origin with a secret custom header and WAF
S-Grade Dispute: 9% 8 comments
#54
Estimate migration TCO with AWS Migration Evaluator before moving to EKS
S-Grade Dispute: 9% 7 comments
#55
Cut ticketing platform cost with a gateway S3 endpoint and scheduled scaling
S-Grade Dispute: 9% 8 comments
#56
Cross-Region read replica plus AMI copy and S3 CRR for disaster recovery
S-Grade Dispute: 8% 7 comments
#57
Enable private DNS on the VPC so interface endpoint hostnames resolve to private addresses
S-Grade Dispute: 8% 8 comments
#58
Deploying a CloudFormation StackSet with a custom-named IAM role to new Regions
S-Grade Dispute: 7% 7 comments
#59
Migrate a Linux CMS site to Elastic Beanstalk with EFS and a separate Aurora MySQL
S-Grade Dispute: 7% 10 comments
#60
Share a Transit Gateway with AWS RAM for a self-service cross-account connection
S-Grade Dispute: 7% 7 comments
#61
Temporary disaster recovery to AWS with 5-minute RPO using Elastic Disaster Recovery
S-Grade Dispute: 6% 10 comments
#62
Migrating file data to S3 while keeping SMB access via Storage Gateway
S-Grade Dispute: 5% 10 comments
#63
Serving a global barcode-validation API with lowest latency using DynamoDB global tables and Lambda@Edge
S-Grade Dispute: 5% 9 comments
#64
Put Amazon Cognito authentication with MFA in front of a Fargate application on an ALB
A-Grade Dispute: 0% 10 comments
#65
Front Aurora replicas with an RDS Proxy read-only endpoint for Lambda
A-Grade Dispute: 0% 7 comments
#66
Trigger CodePipeline with GitHub webhooks and deploy with blue/green CodeDeploy
A-Grade Dispute: 0% 8 comments
#67
Enforce OIDC authentication on the ALB so only authenticated users reach the backends
A-Grade Dispute: 0% 6 comments
#68
Enable AWS Security Hub across the organization with a delegated administrator
A-Grade Dispute: 0% 8 comments
#69
Automate on-premises image transfer to S3 with AWS DataSync
A-Grade Dispute: 0% 7 comments
#70
Enable DynamoDB auto scaling to remove throttling under traffic growth
A-Grade Dispute: 0% 6 comments
#71
Lift and shift three Linux VMs to EC2 behind an ALB with shared EFS storage
A-Grade Dispute: 0% 7 comments
#72
Move a serverless SaaS database to Aurora with RDS Proxy connection pooling
A-Grade Dispute: 0% 6 comments
#73
Expose a shared NLB through a VPC endpoint service when CIDR blocks overlap
A-Grade Dispute: 0% 11 comments
#74
Migrate a self-managed Kubernetes cluster to EKS with managed node groups
A-Grade Dispute: 0% 10 comments
#75
Distribute a 5 GB game package through S3 and CloudFront instead of on-premises FTP
A-Grade Dispute: 0% 6 comments
#76
Improving Application Reliability with Auto Scaling and Aurora
A-Grade Dispute: 0% 7 comments
#77
Serve a custom error page from S3 through CloudFront while the ALB fault is fixed
A-Grade Dispute: 0% 8 comments
#78
Diagnose Route 53 failover with latency-based routing and weighted record sets
A-Grade Dispute: 0% 6 comments
#79
Collect remote experiment data with Snowcone and an FTP server on edge compute
A-Grade Dispute: 0% 9 comments
#80
Modernize to DynamoDB and store large videos as S3 objects referenced by key
A-Grade Dispute: 0% 4 comments
#81
Enforce MFA on S3 CLI access with STS temporary credentials
A-Grade Dispute: 0% 6 comments
#82
Run interruptible batch simulations on AWS Batch with Spot Instances only
A-Grade Dispute: 0% 7 comments
#83
Archive zipped image batches to S3 Glacier Deep Archive with a DataSync Hyper-V agent
A-Grade Dispute: 0% 4 comments
#84
Replace GitHub Actions long-lived keys with an OIDC identity provider and IAM role
A-Grade Dispute: 0% 3 comments
#85
Replace an idle EC2 crawling fleet with Lambda and write results to S3
A-Grade Dispute: 0% 4 comments
#86
Deny IAM actions for non-administrators with a service control policy at the root
A-Grade Dispute: 0% 6 comments
#87
Run the Migration Evaluator agentless collector on an EC2 host to produce a TCO report
A-Grade Dispute: 0% 6 comments
#88
Store VPC flow logs in Apache Parquet with hourly partitions for Athena
A-Grade Dispute: 0% 6 comments
#89
Advertise on-premises and VPC prefixes across a transit VIF for Direct Connect reachability
A-Grade Dispute: 0% 5 comments
#90
Fail over an RDS PostgreSQL cross-Region read replica behind a Route 53 failover record
A-Grade Dispute: 0% 5 comments
#91
Redesign a retail order platform as serverless microservices with EventBridge
A-Grade Dispute: 0% 4 comments
#92
Use an organization CloudTrail trail in the management account instead of per-account trails
A-Grade Dispute: 0% 5 comments
#93
Give remote engineers VPN access with MFA through AWS Client VPN
A-Grade Dispute: 0% 7 comments
#94
Route ticket buyers at the CloudFront edge with a CloudFront function and a separate waiting room service
A-Grade Dispute: 0% 6 comments
#95
Decrypt PGP uploads in a Transfer Family workflow with the private key from Secrets Manager
A-Grade Dispute: 0% 7 comments
#96
Centralize cost allocation and CUR analysis in the management account with Athena and QuickSight
A-Grade Dispute: 0% 9 comments
#97
Batch smart meter readings through Kinesis Data Streams and raise DynamoDB write capacity
A-Grade Dispute: 0% 6 comments
#98
Register an imported EC2 instance with Systems Manager using the agent and an IAM role
A-Grade Dispute: 0% 5 comments
#99
Build a CodePipeline CI/CD flow with CodeBuild, SNS alerts, CDK feature flags, and manual approval
A-Grade Dispute: 0% 6 comments
#100
Use a Storage Gateway volume gateway in cache mode with AWS Backup for iSCSI block storage
A-Grade Dispute: 0% 8 comments
#101
Use a KMS multi-Region key so one key material encrypts in every Region
A-Grade Dispute: 0% 5 comments
#102
Migrate to RDS PostgreSQL and reach the retained Oracle databases over Direct Connect
A-Grade Dispute: 0% 6 comments
#103
Assess schemas with SCT and move the database fleet with DMS
A-Grade Dispute: 0% 7 comments
#104
Move the NAS share to EFS for immediate content updates and ship 200 TB with Snowball Edge
A-Grade Dispute: 0% 6 comments
#105
Deploy legacy Tomcat JARs to Elastic Beanstalk with RDS PostgreSQL
A-Grade Dispute: 0% 5 comments
#106
Move an IoT platform to IoT Core rules, DocumentDB, and Step Functions reports on S3
A-Grade Dispute: 0% 3 comments
#107
Control external API consumption with an API key, usage plan, throttling, and quotas
A-Grade Dispute: 0% 6 comments
#108
Publish the environment as a Service Catalog product with a launch constraint
A-Grade Dispute: 0% 3 comments
#109
Replicate an ecommerce stack with CloudFormation, Route 53 latency routing, and a DynamoDB global table
A-Grade Dispute: 0% 5 comments
#110
Scope S3 access per user with a session-tag condition and audit access with CloudTrail data events
A-Grade Dispute: 0% 3 comments
#111
Trigger Fargate tasks from S3 with a Lambda container-selection function
A-Grade Dispute: 0% 5 comments
#112
Renew EC2 Reserved Instances and add a Compute Savings Plan for serverless
A-Grade Dispute: 0% 6 comments
#113
Deploy the AMS agentless appliance to vCenter and move the Windows share to FSx
A-Grade Dispute: 0% 6 comments
#114
Aggregate organisation audit activity in CloudTrail Lake and query it with SQL
A-Grade Dispute: 0% 4 comments
#115
Validate third-party OAuth tokens with an API Gateway Lambda authorizer
A-Grade Dispute: 0% 7 comments
#116
Alarm on the AWS/Usage service quota metric for Fargate task count
A-Grade Dispute: 0% 4 comments
#117
Scan Lambda packages with Inspector and exclude untagged functions from code scanning
A-Grade Dispute: 0% 4 comments
#118
Use VPC endpoints for S3 and Systems Manager plus VPC peering to the patch source
A-Grade Dispute: 0% 5 comments
#119
Right-size with an Auto Scaling group of 4 baseline instances scaling to 28
A-Grade Dispute: 0% 3 comments

Ready to practice?

Access 85 SAP-C02 questions with instant feedback and detailed explanations.

View SAP-C02 Practice Questions →

← Back to SAP-C02 AWS Certified Solutions Architect Professional Study Guide