Free Amazon SAP-C02 Exam Questions

Absolute Free SAP-C02 Exam Practice for Comprehensive Preparation

Amazon SAP-C02 Exam Questions
Provided By: Amazon
Exam: AWS Certified Solutions Architect- Professional
Certification: AWS Certified Professional

Total Questions: 1107
Updated On: Jul 25, 2026
Rated: 4.9 |
Online Users: 2214

Page No. 1 of 222

Add To Cart

Question 1
- A startup is building a mobile app and a custom GraphQL API backend that lets people post photos and videos of road potholes, faulty street lights, bridge damages, and other issues in the public infrastructure with 100-character summaries. The data gathered by the system will be used by the department of public works to facilitate fast resolution. The developers used a javascript-based React Native mobile framework so that it would run on various mobile and tablet devices. The app will be connecting to a custom GraphQL API that will be responsible for storing the photos and videos in an Amazon S3 bucket and will also access a DynamoDB table to store the summaries. The developers have recently deployed the mobile app prototype but it was found that there is an availability issue with the custom GraphQL API. To proceed with the project, the team decided to remove the API and instead, re-model the mobile app so that it will directly connect to both DynamoDB and S3 as well as handle user authentication.
  Which of the following options provides the most cost-effective and scalable architecture for this project?
  
  A :
  1. Set up a web identity federation using the AssumeRole API of STS and register with social identity providers like Amazon, Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
  2. Create an IAM user for that provider and set up permissions for the IAM user to allow access to S3 and DynamoDB.
  3. The mobile app will use the AWS access and secret keys to store the photos and videos to an S3 bucket and persist the summaries to the DynamoDB database.
  
  B :
  1. Set up a web identity federation using the AssumeRoleWithWebIdentity API of STS and register with social identity providers like Amazon, Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
  2. Create an IAM role for that provider and set up permissions for the IAM role to allow access to S3 and DynamoDB.
  3. The mobile app will use the AWS temporary security credentials to store the photos and videos to an S3 bucket and persist the summaries to the DynamoDB database.
  
  C :
  1. Set up a web identity federation using the AssumeRoleWithSAML API of STS and register with social identity providers like Amazon, Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
  2. Create an IAM role for that provider and set up permissions for the IAM role to allow access to S3 and DynamoDB.
  3. The mobile app will use the AWS temporary security credentials to store the photos and videos to an S3 bucket and persist the summaries to the DynamoDB database.
  
  D :
  1. Set up a web identity federation using Cognito and social identity providers like Amazon, Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
  2. Configure the IAM role in Cognito to allow access to S3 and DynamoDB.
  3. The mobile app will use the AWS access and secret keys to store the photos and videos to an S3 bucket and persist the summaries to the DynamoDB database
  
  E :
  1. Set up a web identity federation using the AssumeRoleWithWebIdentity API of STS and register with social identity providers like Amazon, Google, Facebook or any other OpenID Connect (OIDC)-compatible IdP.
  2. Create an IAM role for that provider and set up permissions for the IAM role to allow access to S3 and DynamoDB.
  3. The mobile app will use the AWS access and secret keys to store the photos and videos to an S3 bucket and persist the summaries to the DynamoDB database.
  
  Answer: B
Question 2
- A company is using AWS to develop and manage its production web application. The application includes anAmazon API Gateway HTTP API that invokes an AWS Lambda function. The Lambda function processesand then stores data in a database.The company wants to implement user authorization for the web application in an integrated way. Thecompany already uses a third-party identity provider that issues OAuth tokens for the company's otherapplications.Which solution will meet these requirements?
  A : Integrate the company's third-party identity provider with API Gateway. Configure an API GatewayLambda authorizer to validate tokens from the identity provider. Require the Lambda authorizer on allAPI routes. Update the web application to get tokens from the identity provider and include the tokensin the Authorization header when calling the API Gateway HTTP API.
  
  B : Integrate the company's third-party identity provider with AWS Directory Service. Configure DirectoryService as an API Gateway authorizer to validate tokens from the identity provider. Require theDirectory Service authorizer on all API routes. Configure AWS IAM Identity Center as a SAML 2.0identity provider. Configure the web application as a custom SAML 2.0 application.
  
  C : Integrate the company's third-party identity provider with AWS IAM Identity Center. Configure APIGateway to use IAM Identity Center for zero-configuration authentication and authorization. Updatethe web application to retrieve AWS STS tokens from IAM Identity Center and include the tokens inthe Authorization header when calling the API Gateway HTTP API.
  
  D : Integrate the company's third-party identity provider with AWS IAM Identity Center. Configure IAMusers with permissions to call the API Gateway HTTP API. Update the web application to extractrequest parameters from the IAM users and include the parameters in the Authorization header whencalling the API Gateway HTTP API.
  
  Answer: A
Question 3
- A company plans to decommission its legacy web application that is hosted in AWS. It is composed of an Auto Scaling group of EC2 instances and an Application Load Balancer (ALB). The new application is built on a new framework. The solutions architect has been tasked to set up a new serverless architecture that is comprised of AWS Lambda, API Gateway, and DynamoDB. In addition, it is required to build a CI/CD pipeline to automate the build process and to support gradual deployments.
  Which is the most suitable way to build, test, and deploy the new architecture in AWS?
  
  A : Use CloudFormation and OpsWorks for your build, deployment, and configuration management service.
  
  B : Use AWS Serverless Application Model (AWS SAM) and set up AWS CodeBuild, AWS CodeDeploy, and AWS CodePipeline to build a CI/CD pipeline.
  
  C : Use the AWS Serverless Application Repository to organize related components, share configuration such as memory and timeouts between resources, and deploy all related resources together as a single, versioned entity.
  
  D : Set up a CI/CD pipeline using CodeCommit, CodeBuild, CodeDeploy, and CodePipeline to build the CI/CD pipeline then use AWS Systems Manager Automation to automate the build process and support gradual deployments.
  
  Answer: B
Question 4
- A company hosts a software as a service (SaaS) solution on AWS. The solution has an Amazon API Gateway API that serves an HTTPS endpoint. The API uses AWS Lambda functions for compute. The Lambda functions store data in an Amazon Aurora Serverless VI database. The company used the AWS Serverless Application Model (AWS SAM) to deploy the solution. The solution extends across multiple Availability Zones and has no disaster recovery (DR) plan. A solutions architect must design a DR strategy that can recover the solution in another AWS Region. The solution has an R TO of 5 minutes and an RPO of 1 minute. What should the solutions architect do to meet these requirements?
  
  A :
  Create a read replica of the Aurora Serverless VI database in the target Region. Use AWS SAM to create a runbook to deploy the solution to the target Region. Promote the read replica to primary in case of disaster.
  
  B :
  Change the Aurora Serverless VI database to a standard Aurora MySQL global database that extends across the source Region and the target Region. Use AWS SAM to create a runbook to deploy the solution to the target Region.
  
  C :
  Create an Aurora Serverless VI DB cluster that has multiple writer instances in the target Region. Launch the solution in the target Region. Configure the two Regional solutions to work in an active-passive configuration.
  
  D :
  Change the Aurora Serverless VI database to a standard Aurora MySQL global database that extends across the source Region and the target Region. Launch the solution in the target Region. Configure the two Regional solutions to work in an active-passive configuration.
  
  Answer: D
Question 5
- During an audit, a security team discovered that a development team was putting IAM user secret access keys
  in their code and then committing it to an AWS CodeCommit repository . The security team wants to
  automatically find and remediate instances of this security vulnerability
  Which solution will ensure that the credentials are appropriately secured automatically?
  
  A :
  Run a script nightly using AWS Systems Manager Run Command to search for credentials on the
  development instances If found use AWS Secrets Manager to rotate the credentials.
  
  B :
  Use a scheduled AWS Lambda function to download and scan the application code from CodeCommit
  If credentials are found, generate new credentials and store them in AWS KMS
  
  C :
  Configure Amazon Macie to scan for credentials in CodeCommit repositories If credentials are found,
  trigger an AWS Lambda function to disable the credentials and notify the user
  
  D :
  Configure a CodeCommit trigger to invoke an AWS Lambda function to scan new code submissions for
  credentials If credentials are found, disable them in AWS IAM and notify the user.
  
  Answer: A

PAGE: 1 - 222

Add To Cart

We use cookies to ensure your best experience. So we hope you are happy to receive all cookies on the DumpsEngine.