Disagreement ranking

SAP-C02 — most debated topics

Community-voted ranking of 126 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

126 topics · highest disagreement first

  1. Modernize centralized firewall appliances with a Gateway Load Balancer and Auto Scaling

    S-grade Dispute: 55% 25 comments

  2. Use Lambda over a CloudWatch Logs stream to count unique users per client

    S-grade Dispute: 50% 13 comments

  3. Serve global game assets with Route 53 latency records and health checks

    S-grade Dispute: 48% 20 comments

  4. Reach a cross-account S3 data lake through a gateway endpoint and an access point bucket policy

    S-grade Dispute: 47% 18 comments

  5. Centralized billing and service governance for LOB accounts with Organizations and SCPs

    S-grade Dispute: 43% 26 comments

  6. Enrich IoT data with Lambda through Kinesis Data Firehose buffering

    S-grade Dispute: 43% 19 comments

  7. Split a central Cost and Usage Report per account with an S3 event and Lambda

    S-grade Dispute: 41% 18 comments

  8. Mount the S3 pricing file with Mountpoint for Amazon S3 to eliminate stale pricing

    S-grade Dispute: 39% 13 comments

  9. Combine S3 Multi-Region Access Points with Direct Connect and PrivateLink

    S-grade Dispute: 37% 11 comments

  10. Cost-optimizing short-lived contest workloads with DynamoDB TTL and Lambda

    S-grade Dispute: 35% 21 comments

  11. Collect on-premises discovery data with the Application Discovery Agent for Migration Hub

    S-grade Dispute: 35% 16 comments

  12. Use a Storage Gateway tape gateway to reach on-premises tape from AWS

    S-grade Dispute: 34% 18 comments

  13. Connecting 50 growing VPCs and exposing license validation via PrivateLink

    S-grade Dispute: 33% 14 comments

  14. Correct the cross-account role trust policy after recreating a role with CloudFormation

    S-grade Dispute: 33% 14 comments

  15. Add RDS Proxy and provisioned concurrency to bursty serverless Lambda functions

    S-grade Dispute: 33% 11 comments

  16. Reducing cross-Region S3 upload lag by using regional buckets and replication

    S-grade Dispute: 32% 27 comments

  17. EFS Multi-AZ with cross-Region replication for a shared Linux application dataset

    S-grade Dispute: 32% 12 comments

  18. Fixing false-positive health checks and database load with a simple health check and ElastiCache

    S-grade Dispute: 30% 18 comments

  19. Reduce scale-out latency with warm pools and lifecycle hooks on a mixed-instances group

    S-grade Dispute: 30% 10 comments

  20. Protecting an S3 bucket from deletion by leaked long-term credentials using Object Lock

    S-grade Dispute: 29% 13 comments

  21. Migrating an Aurora MySQL cluster to another account with minimal interruption

    S-grade Dispute: 29% 11 comments

  22. Serverless sensor ingestion with Firehose, Lambda, S3, and Athena

    S-grade Dispute: 26% 15 comments

  23. Configure cross-Region WorkSpaces redirection with connection aliases and Route 53 failover

    S-grade Dispute: 26% 13 comments

  24. Enabling an EC2 transparent proxy by disabling source/destination checks

    S-grade Dispute: 25% 9 comments

  25. Use RDS Proxy to absorb Lambda connection bursts against RDS for PostgreSQL

    S-grade Dispute: 25% 17 comments

  26. Combine Lambda provisioned concurrency, RDS Reserved Instances, and WAF on CloudFront

    S-grade Dispute: 25% 12 comments

  27. Cut Java Lambda cold starts with SnapStart and move non-deterministic code into handlers

    S-grade Dispute: 24% 11 comments

  28. Provisioning IoT devices with a pre-provisioning hook that validates the X.509 serial number

    S-grade Dispute: 23% 10 comments

  29. Collecting VM network dependency diagrams with the Application Discovery Agent

    S-grade Dispute: 21% 11 comments

  30. Add a static Site-to-Site VPN as the resilient backup path to a 1 Gbps Direct Connect link

    S-grade Dispute: 21% 15 comments

  31. Replace a single web instance with an Auto Scaling group and Aurora read replicas

    S-grade Dispute: 21% 14 comments

  32. Running EKS control plane and data plane on premises with an Outposts local cluster

    S-grade Dispute: 20% 20 comments

  33. Use AWS Cost Anomaly Detection with an AWS services monitor to pinpoint waste

    S-grade Dispute: 20% 18 comments

  34. Use Amazon MemoryDB for Redis in Multi-AZ mode for a real-time game leaderboard

    S-grade Dispute: 20% 7 comments

  35. Publish SES event logs to S3 through Data Firehose and query them with Athena

    S-grade Dispute: 20% 9 comments

  36. Trigger instance cleanup from the Trusted Advisor cost optimization check via EventBridge

    S-grade Dispute: 20% 10 comments

  37. Bringing a manually created VPC under CloudFormation management via resource import

    S-grade Dispute: 19% 14 comments

  38. Migrate .NET Framework applications to Elastic Beanstalk with the Web Application Migration Assistant

    S-grade Dispute: 19% 12 comments

  39. Share a Transit Gateway through AWS RAM for cross-account Aurora connectivity

    S-grade Dispute: 18% 14 comments

  40. Allocating per-tenant DynamoDB cost with the least operational effort

    S-grade Dispute: 17% 9 comments

  41. Connecting global WAN to data in multiple Regions over Direct Connect Gateway

    S-grade Dispute: 15% 10 comments

  42. Modernize a three-tier web application with S3 static hosting, Elastic Beanstalk, and Aurora

    S-grade Dispute: 15% 13 comments

  43. Create an hourly EFS backup plan with a dedicated IAM role for a 100-minute RPO

    S-grade Dispute: 13% 9 comments

  44. Restrict Amazon WorkSpaces access with an IP access control group

    S-grade Dispute: 13% 13 comments

  45. Empty an S3 bucket with a Lambda-backed CloudFormation custom resource before stack deletion

    S-grade Dispute: 12% 14 comments

  46. Cut S3 video costs by expiring incomplete multipart uploads and using S3 Standard-IA after 180 days

    S-grade Dispute: 12% 10 comments

  47. Peer each application VPC directly to the single target VPC in the other Region

    S-grade Dispute: 12% 5 comments

  48. Publish on-premises TCP services to AWS customers through a PrivateLink endpoint service

    S-grade Dispute: 11% 11 comments

  49. Layer WAF, Inspector, and GuardDuty across an API Gateway API and a legacy EC2 API

    S-grade Dispute: 11% 7 comments

  50. Continuously scan EKS nodes and ECR images with Amazon Inspector

    S-grade Dispute: 10% 12 comments

  51. Increase the Auto Scaling health check grace period for slow-starting instances

    S-grade Dispute: 10% 6 comments

  52. Use AWS Config remediation with EBS encryption by default to fix and prevent unencrypted volumes

    S-grade Dispute: 10% 8 comments

  53. Hardening a CloudFront origin with a secret custom header and WAF

    S-grade Dispute: 9% 8 comments

  54. Estimate migration TCO with AWS Migration Evaluator before moving to EKS

    S-grade Dispute: 9% 7 comments

  55. Cut ticketing platform cost with a gateway S3 endpoint and scheduled scaling

    S-grade Dispute: 9% 8 comments

  56. Cross-Region read replica plus AMI copy and S3 CRR for disaster recovery

    S-grade Dispute: 8% 7 comments

  57. Enable private DNS on the VPC so interface endpoint hostnames resolve to private addresses

    S-grade Dispute: 8% 8 comments

  58. Deploying a CloudFormation StackSet with a custom-named IAM role to new Regions

    S-grade Dispute: 7% 7 comments

  59. Migrate a Linux CMS site to Elastic Beanstalk with EFS and a separate Aurora MySQL

    S-grade Dispute: 7% 10 comments

  60. Share a Transit Gateway with AWS RAM for a self-service cross-account connection

    S-grade Dispute: 7% 7 comments

  61. Temporary disaster recovery to AWS with 5-minute RPO using Elastic Disaster Recovery

    S-grade Dispute: 6% 10 comments

  62. Migrating file data to S3 while keeping SMB access via Storage Gateway

    S-grade Dispute: 5% 10 comments

  63. Serving a global barcode-validation API with lowest latency using DynamoDB global tables and Lambda@Edge

    S-grade Dispute: 5% 9 comments

  64. Put Amazon Cognito authentication with MFA in front of a Fargate application on an ALB

    A-grade Dispute: 0% 10 comments

  65. Front Aurora replicas with an RDS Proxy read-only endpoint for Lambda

    A-grade Dispute: 0% 7 comments

  66. Trigger CodePipeline with GitHub webhooks and deploy with blue/green CodeDeploy

    A-grade Dispute: 0% 8 comments

  67. Enforce OIDC authentication on the ALB so only authenticated users reach the backends

    A-grade Dispute: 0% 6 comments

  68. Enable AWS Security Hub across the organization with a delegated administrator

    A-grade Dispute: 0% 8 comments

  69. Automate on-premises image transfer to S3 with AWS DataSync

    A-grade Dispute: 0% 7 comments

  70. Enable DynamoDB auto scaling to remove throttling under traffic growth

    A-grade Dispute: 0% 6 comments

  71. Lift and shift three Linux VMs to EC2 behind an ALB with shared EFS storage

    A-grade Dispute: 0% 7 comments

  72. Move a serverless SaaS database to Aurora with RDS Proxy connection pooling

    A-grade Dispute: 0% 6 comments

  73. Expose a shared NLB through a VPC endpoint service when CIDR blocks overlap

    A-grade Dispute: 0% 11 comments

  74. Migrate a self-managed Kubernetes cluster to EKS with managed node groups

    A-grade Dispute: 0% 10 comments

  75. Distribute a 5 GB game package through S3 and CloudFront instead of on-premises FTP

    A-grade Dispute: 0% 6 comments

  76. Improving Application Reliability with Auto Scaling and Aurora

    A-grade Dispute: 0% 7 comments

  77. Serve a custom error page from S3 through CloudFront while the ALB fault is fixed

    A-grade Dispute: 0% 8 comments

  78. Diagnose Route 53 failover with latency-based routing and weighted record sets

    A-grade Dispute: 0% 6 comments

  79. Collect remote experiment data with Snowcone and an FTP server on edge compute

    A-grade Dispute: 0% 9 comments

  80. Modernize to DynamoDB and store large videos as S3 objects referenced by key

    A-grade Dispute: 0% 4 comments

  81. Enforce MFA on S3 CLI access with STS temporary credentials

    A-grade Dispute: 0% 6 comments

  82. Run interruptible batch simulations on AWS Batch with Spot Instances only

    A-grade Dispute: 0% 7 comments

  83. Archive zipped image batches to S3 Glacier Deep Archive with a DataSync Hyper-V agent

    A-grade Dispute: 0% 4 comments

  84. Replace GitHub Actions long-lived keys with an OIDC identity provider and IAM role

    A-grade Dispute: 0% 3 comments

  85. Replace an idle EC2 crawling fleet with Lambda and write results to S3

    A-grade Dispute: 0% 4 comments

  86. Deny IAM actions for non-administrators with a service control policy at the root

    A-grade Dispute: 0% 6 comments

  87. Run the Migration Evaluator agentless collector on an EC2 host to produce a TCO report

    A-grade Dispute: 0% 6 comments

  88. Store VPC flow logs in Apache Parquet with hourly partitions for Athena

    A-grade Dispute: 0% 6 comments

  89. Advertise on-premises and VPC prefixes across a transit VIF for Direct Connect reachability

    A-grade Dispute: 0% 5 comments

  90. Fail over an RDS PostgreSQL cross-Region read replica behind a Route 53 failover record

    A-grade Dispute: 0% 5 comments

  91. Redesign a retail order platform as serverless microservices with EventBridge

    A-grade Dispute: 0% 4 comments

  92. Use an organization CloudTrail trail in the management account instead of per-account trails

    A-grade Dispute: 0% 5 comments

  93. Give remote engineers VPN access with MFA through AWS Client VPN

    A-grade Dispute: 0% 7 comments

  94. Route ticket buyers at the CloudFront edge with a CloudFront function and a separate waiting room service

    A-grade Dispute: 0% 6 comments

  95. Decrypt PGP uploads in a Transfer Family workflow with the private key from Secrets Manager

    A-grade Dispute: 0% 7 comments

  96. Centralize cost allocation and CUR analysis in the management account with Athena and QuickSight

    A-grade Dispute: 0% 9 comments

  97. Batch smart meter readings through Kinesis Data Streams and raise DynamoDB write capacity

    A-grade Dispute: 0% 6 comments

  98. Register an imported EC2 instance with Systems Manager using the agent and an IAM role

    A-grade Dispute: 0% 5 comments

  99. Build a CodePipeline CI/CD flow with CodeBuild, SNS alerts, CDK feature flags, and manual approval

    A-grade Dispute: 0% 6 comments

  100. Use a Storage Gateway volume gateway in cache mode with AWS Backup for iSCSI block storage

    A-grade Dispute: 0% 8 comments

  101. Use a KMS multi-Region key so one key material encrypts in every Region

    A-grade Dispute: 0% 5 comments

  102. Migrate to RDS PostgreSQL and reach the retained Oracle databases over Direct Connect

    A-grade Dispute: 0% 6 comments

  103. Assess schemas with SCT and move the database fleet with DMS

    A-grade Dispute: 0% 7 comments

  104. Move the NAS share to EFS for immediate content updates and ship 200 TB with Snowball Edge

    A-grade Dispute: 0% 6 comments

  105. Deploy legacy Tomcat JARs to Elastic Beanstalk with RDS PostgreSQL

    A-grade Dispute: 0% 5 comments

  106. Move an IoT platform to IoT Core rules, DocumentDB, and Step Functions reports on S3

    A-grade Dispute: 0% 3 comments

  107. Control external API consumption with an API key, usage plan, throttling, and quotas

    A-grade Dispute: 0% 6 comments

  108. Publish the environment as a Service Catalog product with a launch constraint

    A-grade Dispute: 0% 3 comments

  109. Replicate an ecommerce stack with CloudFormation, Route 53 latency routing, and a DynamoDB global table

    A-grade Dispute: 0% 5 comments

  110. Scope S3 access per user with a session-tag condition and audit access with CloudTrail data events

    A-grade Dispute: 0% 3 comments

  111. Trigger Fargate tasks from S3 with a Lambda container-selection function

    A-grade Dispute: 0% 5 comments

  112. Renew EC2 Reserved Instances and add a Compute Savings Plan for serverless

    A-grade Dispute: 0% 6 comments

  113. Deploy the AMS agentless appliance to vCenter and move the Windows share to FSx

    A-grade Dispute: 0% 6 comments

  114. Aggregate organisation audit activity in CloudTrail Lake and query it with SQL

    A-grade Dispute: 0% 4 comments

  115. Validate third-party OAuth tokens with an API Gateway Lambda authorizer

    A-grade Dispute: 0% 7 comments

  116. Alarm on the AWS/Usage service quota metric for Fargate task count

    A-grade Dispute: 0% 4 comments

  117. Scan Lambda packages with Inspector and exclude untagged functions from code scanning

    A-grade Dispute: 0% 4 comments

  118. Use VPC endpoints for S3 and Systems Manager plus VPC peering to the patch source

    A-grade Dispute: 0% 5 comments

  119. Right-size with an Auto Scaling group of 4 baseline instances scaling to 28

    A-grade Dispute: 0% 3 comments

  120. How Should a Company Design High-Performance Hybrid DNS for cloud.example.com?

    S-grade Dispute: 0% 102 comments

  121. How to Let a New Account Update AWS Config Under Root SCPs?

    S-grade Dispute: 0% 73 comments

  122. How to Share VPC Subnets Across AWS Accounts with RAM?

    S-grade Dispute: 0% 68 comments

  123. Which S3 storage solution archives private documents at the lowest cost?

    S-grade Dispute: 0% 147 comments

  124. How Do You Detect Unsolicited Inbound Traffic in NAT Gateway Flow Logs?

    S-grade Dispute: 0% 77 comments

  125. How to Replicate Aurora MySQL Cross-Region for DR at Lowest Cost?

    S-grade Dispute: 0% 71 comments

  126. How to Collect Migration Evaluator Assessment and VM Dependencies with Least Overhead?

    S-grade Dispute: 0% 23 comments

← Back to SAP-C02 AWS Certified Solutions Architect Professional Study Guide