Architect network connectivity strategies.
26 practice questions under this official exam objective (SAP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
26 total · page 1 of 2How Should a Company Design High-Performance Hybrid DNS for cloud.example.com?
This SAP-C02 hybrid DNS scenario requires cloud.example.com to resolve from every VPC and from on-premises over Direct Connect and Transit Gateway. Th
How to Share VPC Subnets Across AWS Accounts with RAM?
Sharing a common VPC network across many AWS accounts requires enabling AWS RAM resource sharing in Organizations and sharing the infrastructure accou
Modernize centralized firewall appliances with a Gateway Load Balancer and Auto Scaling
Two statically addressed firewall appliances on manually built EC2 instances must become a horizontally scalable, self-healing deployment, while membe
Serve global game assets with Route 53 latency records and health checks
Game assets are served from ALBs in two Regions. Players must be served from the geographically closest Region, and if the closest Region becomes unav
Enrich IoT data with Lambda through Kinesis Data Firehose buffering
A factory application sends sensor data from hundreds of devices through AWS IoT Core to an S3 data lake, transmitting every five seconds. The data mu
Add a static Site-to-Site VPN as the resilient backup path to a 1 Gbps Direct Connect link
An existing 1 Gbps Direct Connect connection with BGP carries on-premises to AWS traffic. The network must become highly available, fault tolerant, an
Share a Transit Gateway through AWS RAM for cross-account Aurora connectivity
Development teams in separate member accounts need live connectivity to a single Amazon Aurora DB cluster hosted in a shared services account. Because
Connecting 50 growing VPCs and exposing license validation via PrivateLink
Fifty VPCs across Regions/accounts need full mesh connectivity plus one-way access to a management VPC for license validation, scaling as VPCs grow. A
Mount the S3 pricing file with Mountpoint for Amazon S3 to eliminate stale pricing
A ticketing service on Linux EC2 instances downloads a pricing file from S3 at instance launch, so instances that have been running for a while serve
Expose a shared NLB through a VPC endpoint service when CIDR blocks overlap
A centralized EC2 application sits in a shared VPC behind a Network Load Balancer and up to ten business unit VPCs need to reach it. Some business uni
Combine S3 Multi-Region Access Points with Direct Connect and PrivateLink
A global static content platform is served from a single S3 bucket, uploaded from on-premises through an S3 File Gateway, and must serve customers fro
Publish on-premises TCP services to AWS customers through a PrivateLink endpoint service
Sensitive on-premises services must be offered to other companies that use AWS, and the traffic may not cross the internet. The existing Direct Connec
Connecting global WAN to data in multiple Regions over Direct Connect Gateway
Critical data spans multiple public Regions and must be reachable from a global WAN without traversing the public internet. Two DX connections from HQ
Collect remote experiment data with Snowcone and an FTP server on edge compute
Sensors on a local network with no internet connectivity will generate 6 TB of proprietary-format data over one week, and the sensors can upload to an
Enabling an EC2 transparent proxy by disabling source/destination checks
An EC2 instance deployed as a transparent proxy in a private subnet is configured as the default route but does not forward traffic. Because an instan
Serving a global barcode-validation API with lowest latency using DynamoDB global tables a
A global barcode app needs multi-region low latency and DNS api.example.com. DynamoDB global tables provide multi-Region data access, CloudFront front
Cut ticketing platform cost with a gateway S3 endpoint and scheduled scaling
An events ticketing platform runs on ECS over EC2 On-Demand instances in an Auto Scaling group with predictive scaling, and the cluster downloads tick
Enable private DNS on the VPC so interface endpoint hostnames resolve to private addresses
A policy requires all internal application connectivity to use private IP addresses, so interface endpoints were created for AWS public services. Test
Give remote engineers VPN access with MFA through AWS Client VPN
A software company has engineers working remotely and runs Active Directory Domain Services on an Amazon EC2 instance. Security policy requires all in
Share a Transit Gateway with AWS RAM for a self-service cross-account connection
A development account needs access to applications in a shared services VPC that is attached to a transit gateway. Resources in the development accoun