Design reliable and resilient architectures.
20 practice questions under this official exam objective (SAP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
20 total · page 1 of 1Add a static Site-to-Site VPN as the resilient backup path to a 1 Gbps Direct Connect link
An existing 1 Gbps Direct Connect connection with BGP carries on-premises to AWS traffic. The network must become highly available, fault tolerant, an
Empty an S3 bucket with a Lambda-backed CloudFormation custom resource before stack deleti
Application versions are deployed by creating a CloudFormation stack and removing the old stack after validation. A stack deletion recently failed bec
Publish on-premises TCP services to AWS customers through a PrivateLink endpoint service
Sensitive on-premises services must be offered to other companies that use AWS, and the traffic may not cross the internet. The existing Direct Connec
Reduce scale-out latency with warm pools and lifecycle hooks on a mixed-instances group
A single-instance web application becomes slow at high CPU, and new instances take several minutes to launch because a user data script installs custo
Use a Storage Gateway volume gateway in cache mode with AWS Backup for iSCSI block storage
A global ecommerce company needs scalable storage for legacy on-premises file applications, must be able to take point-in-time copies of the volumes w
Serve a custom error page from S3 through CloudFront while the ALB fault is fixed
An ecommerce application behind an ALB occasionally returns a 502 Bad Gateway because the targets return malformed HTTP headers, and reloading immedia
Trigger CodePipeline with GitHub webhooks and deploy with blue/green CodeDeploy
Engineers manage code in a private GitHub repository and use Jenkins for builds and unit testing, and they have chosen AWS CodePipeline to manage buil
Validate third-party OAuth tokens with an API Gateway Lambda authorizer
A company's web application runs behind an API Gateway HTTP API that invokes a Lambda function, and it already uses a third-party identity provider th
Improving Application Reliability with Auto Scaling and Aurora
This question addresses designing a reliable architecture for a web application by eliminating single points of failure in both the compute layer (Tom
Build a CodePipeline CI/CD flow with CodeBuild, SNS alerts, CDK feature flags, and manual
A company uses CloudFormation for all deployments and stages binaries in versioned S3 buckets, with developers working from an EC2-hosted IDE. The dev
Route ticket buyers at the CloudFront edge with a CloudFront function and a separate waiti
An ECS-hosted ticketing application is served through CloudFront and limits how many users may enter the purchasing flow, identified by an encrypted a
Store VPC flow logs in Apache Parquet with hourly partitions for Athena
VPC flow logs from many accounts are published as gzip-compressed text files to a centralized S3 bucket, retained indefinitely, and occasionally queri
Enforce OIDC authentication on the ALB so only authenticated users reach the backends
CloudFront fronts two custom origins, an API Gateway HTTP API protected by a JWT authorizer and an Application Load Balancer that a security audit fou
Trigger Fargate tasks from S3 with a Lambda container-selection function
An application on EC2 polls an EFS file system for new files, picks a Docker image per file, and runs it as a container that can take up to two hours
Replicate an ecommerce stack with CloudFormation, Route 53 latency routing, and a DynamoDB
A single-Region ecommerce site runs a web application on EC2 behind an Application Load Balancer with a DynamoDB table, a custom domain in Route 53, a
Register an imported EC2 instance with Systems Manager using the agent and an IAM role
A VM imported from on-premises with EC2 VM Import runs from a new AMI in a public subnet with a public IP address, but it does not appear as a managed
Advertise on-premises and VPC prefixes across a transit VIF for Direct Connect reachabilit
A company is setting up a 1 Gbps Direct Connect connection with a transit gateway and a Direct Connect gateway to connect multiple VPCs to on-premises
Redesign a retail order platform as serverless microservices with EventBridge
A retail company's order registration, returns handling, and analytics applications are multi-component applications running on EC2 with MySQL and an
Archive zipped image batches to S3 Glacier Deep Archive with a DataSync Hyper-V agent
An on-premises application zips images into single files and archives them to an NFS server. The company has a Hyper-V environment, spare compute capa
Modernize to DynamoDB and store large videos as S3 objects referenced by key
An application stores user profile data as text in a single table in an on-premises MySQL database, and after modernization users will upload video fi