Free Amazon SAP-C02 Exam Questions

Absolute Free SAP-C02 Exam Practice for Comprehensive Preparation

Amazon SAP-C02 Exam Questions
Provided By: Amazon
Exam: AWS Certified Solutions Architect- Professional
Certification: AWS Certified Professional

Total Questions: 1107
Updated On: Sep 25, 2026
Rated: 4.9 |
Online Users: 2214

Page No. 1 of 222

Add To Cart

Question 1
- A company uses AWS Organizations to manage its AWS accounts. The company needs a list of all its Amazon EC2 instances that have underutilized CPU or memory usage. The company also needs recommendations for how to downsize these underutilized instances. Which solution will meet these requirements with the LEAST effort?
  
  A :
  Install a CPU and memory monitoring tool from AWS Marketplace on all the EC2 Instances. Store the findings in Amazon S3. Implement a Python script to identify underutilized instances. Reference EC2 instance pricing information for recommendations about downsizing options.
  
  B :
  Install the Amazon CloudWatch agent on all the EC2 instances by using AWS Systems Manager. Retrieve the resource op! nization recommendations from AWS Cost Explorer in the organization's management account. Use the recommendations to downsize underutilized instances in all accounts of the organization.
  
  C :
  Install the Amazon CloudWatch agent on all the EC2 instances by using AWS Systems Manager. Retrieve the resource optimization recommendations from AWS Cost Explorer in each account of the organization. Use the recommendations to downsize underutilized instances in all accounts of the organization.
  
  D :
  Install the Amazon CloudWatch agent on all the EC2 instances by using AWS Systems Manager Create an AWS Lambda function to extract CPU and memory usage from all the EC2 instances. Store the findings as files in Amazon S3. Use Amazon Athena to find underutilized instances. Reference EC2 instance pricing information for recommendations about downsizing options.
  
  Answer: B
Question 2
- A publishing company's design team updates the icons and other static assets that an ecommerce web
  application uses. The company serves the icons and assets from an Amazon S3 bucket that is hosted in the
  company's production account. The company also uses a development account that members of the design
  team can access.
  After the design team tests the static assets in the development account, the design team needs to load the
  assets into the S3 bucket in the production account. A solutions architect must provide the design team with
  access to the production account without exposing other parts of the web application to the risk of unwanted
  changes.
  Which combination of steps will meet these requirements? (Select THREE.)
  
  A : In the production account, create a new IAM policy that allows read and write access to the S3 bucket.
  
  B : In the development account, create a new IAM policy that allows read and write access to the S3 bucket.
  
  C : In the production account, create a role. Attach the new policy to the role. Define the development account as a trusted entity.
  
  D : In the development account, create a role. Attach the new policy to the role. Define the production account as a trusted entity.
  
  E : In the development account, create a group that contains all the IAM users of the design team. Attach a different IAM policy to the group to allow the sts:AssumeRole action on the role in the production account.
  
  F : In the development account, create a group that contains all tfje IAM users of the design team. Attach a different IAM policy to the group to allow the sts;AssumeRole action on the role in the development account.
  
  Answer: A,C,E
Question 3
- A company runs its travel and tours website on AWS. The application only supports HTTP at the moment. To improve their SEO ranking and provide more security for their customers, they decided to enable SSL on their website. The company would also like to ensure the separation of roles between the Development team and the Security team in handling the sensitive SSL certificate. The Development team can log in to EC2 Instances but they should not have access to the SSL certificate, which only the Security team has exclusive control of. Currently, they are using an Application Load Balancer which provides loads of incoming traffic to an Auto Scaling group of On-Demand EC2 instances.
  Which of the following options should the solutions architect implement to satisfy the above requirements?
  
  A : In the web server, set the file owner of the SSL certificate to the Security team and set the file permissions to 700 which will deny all access to the Development team.
  
  B : Create a new private S3 bucket and then upload the SSL certificate owned by the Security team. Configure the EC2 instance to have exclusive access to the certificate and block any access from the Development team.
  
  C : Store the SSL certificate in IAM and authorize access only to the Security team using an IAM policy. Configure the Application Load Balancer to use the SSL certificate instead of the EC2 instances.
  
  D : Retrieve a read-only copy of the SSL certificate upon the boot of the EC2 instance from a CloudHSM, which is exclusively managed by the Security team.
  
  Answer: C
Question 4
- A company uses a service to collect metadata from applications that the company hosts on premises.
  Consumer devices such as TVs and internet radios access the applications. Many older devices do not support
  certain HTTP headers and exhibit errors when these headers are present in responses. The company has
  configured an on-premises load balancer to remove the unsupported headers from responses sent to older
  devices, which the company identified by the User-Agent headers.
  The company wants to migrate the service to AWS, adopt serverless technologies, and retain the ability to
  support the older devices. The company has already migrated the applications into a set of AWS Lambda
  functions.
  Which solution will meet these requirements?
  
  A : Create an Amazon CloudFront distribution for the metadata service. Create an Application Load Balancer (ALB). Configure the CloudFront distribution to forward requests to the ALB. Configure the ALB to invoke the correct Lambda function for each type of request. Create a CloudFront function to remove the problematic headers based on the value of the User-Agent header.
  
  B : Create an Amazon API Gateway REST API for the metadata service. Configure API Gateway to invoke the correct Lambda function for each type of request. Modify the default gateway responses to remove the problematic headers based on the value of the User-Agent header.
  
  C : Create an Amazon API Gateway HTTP API for the metadata service. Configure API Gateway to invoke the correct Lambda function for each type of request. Create a response mapping template to remove the problematic headers based on the value of the User-Agent. Associate the response data mapping with the HTTP API.
  
  D : Create an Amazon CloudFront distribution for the metadata service. Create an Application Load Balancer (ALB). Configure the CloudFront distribution to forward requests to the ALB. Configure the ALB to invoke the correct Lambda function for each type of request. Create a Lambda@Edge function that will remove the problematic headers in response to viewer requests based on the value of the User-Agent header.
  
  Answer: D
Question 5
- A company's solutions architect is reviewing a web application that runs on AWS. The application references
  static assets in an Amazon S3 bucket in the us-east-1 Region. The company needs resiliency across multiple
  AWS Regions. The company already has created an S3 bucket in a second Region.
  Which solution will meet these requirements with the LEAST operational overhead?
  
  A : Configure the application to write each object to both S3 buckets. Set up an Amazon Route 53 public hosted zone with a record set by using a weighted routing policy for each S3 bucket. Configure the application to reference the objects by using the Route 53 DNS name.
  
  B : Create an AWS Lambda function to copy objects from the S3 bucket in us-east-1 to the S3 bucket in the second Region. Invoke the Lambda function each time an object is written to the S3 bucket in us-east-1. Set up an Amazon CloudFront distribution with an origin group that contains the two S3 buckets as origins.
  
  C : Configure replication on the S3 bucket in us-east-1 to replicate objects to the S3 bucket in the second Region Set up an Amazon CloudFront distribution with an origin group that contains the two S3 buckets as origins.
  
  D : Configure replication on the S3 bucket in us-east-1 to replicate objects to the S3 bucket in the second Region. If failover is required, update the application code to load S3 objects from the S3 bucket in the second Region.
  
  Answer: C

PAGE: 1 - 222

Add To Cart

We use cookies to ensure your best experience. So we hope you are happy to receive all cookies on the DumpsEngine.