View Full Amazon AWS Certified Solutions Architect – Professional SAP-C02 Exam Dumps and Practice Test Dumps.

 

Question 101

A company wants to cache database query results to reduce database load. Which AWS service is most suitable?

1. Amazon ElastiCache
2. Amazon S3
3. Amazon EFS
4. AWS DataSync

Correct Answer: 1

Explanation

Amazon ElastiCache provides managed in-memory caching using engines such as Redis and Memcached. Applications can store frequently accessed database results in the cache and retrieve them much faster than repeatedly querying the underlying database. This can reduce database load and improve application response times. Amazon S3 provides object storage, EFS provides shared file storage, and DataSync is designed for data transfers. Therefore, ElastiCache is the appropriate service when an application needs a fast caching layer to reduce database queries.

Question 102

Which service provides a managed, scalable DNS resolver for VPC resources?

1. AWS PrivateLink
2. Amazon Route 53 Resolver
3. AWS Transit Gateway
4. Amazon CloudFront

Correct Answer: 2

Explanation

Amazon Route 53 Resolver provides DNS resolution for resources within VPCs and can also forward DNS queries between AWS and on-premises environments. It includes inbound and outbound endpoints that support hybrid DNS architectures. PrivateLink provides private service connectivity, Transit Gateway connects networks, and CloudFront provides content delivery. Route 53 Resolver is therefore appropriate when an organization needs centralized DNS resolution or forwarding between VPC environments and external networks. It can help maintain consistent name resolution across complex hybrid and multi-account AWS architectures.

Question 103

A company requires a database that supports automatic replication across multiple Availability Zones. Which option is appropriate?

1. Amazon RDS Multi-AZ
2. Amazon EBS
3. Amazon S3
4. Amazon EFS

Correct Answer: 1

Explanation

Amazon RDS Multi-AZ deployments maintain a standby database in another Availability Zone and provide managed failover capabilities. This architecture improves database availability and protects against failures affecting the primary database infrastructure. EBS is block storage, S3 is object storage, and EFS is shared file storage. RDS Multi-AZ is specifically designed to improve availability for relational databases without requiring customers to manually manage database replication infrastructure. Therefore, RDS Multi-AZ is the appropriate choice when a relational database requires automatic replication across Availability Zones.

Question 104

Which AWS service provides a centralized place to manage software packages and dependencies?

1. AWS CodeArtifact
2. AWS CodeDeploy
3. AWS CodeBuild
4. Amazon ECR

Correct Answer: 1

Explanation

AWS CodeArtifact is a managed artifact repository service used to securely store, publish, and share software packages and dependencies. It supports common package formats and can be integrated into software development workflows. CodeDeploy automates application deployments, CodeBuild provides managed build environments, and Amazon ECR stores container images. CodeArtifact is particularly useful for organizations that need private repositories for application dependencies and internal packages. Therefore, AWS CodeArtifact is the appropriate service for centralized software package and dependency management.

Question 105

A company needs to store container images privately and retrieve them during deployments. Which service should be used?

1. Amazon ECR
2. Amazon S3 Glacier
3. Amazon EFS
4. Amazon FSx

Correct Answer: 1

Explanation

Amazon Elastic Container Registry, or ECR, is a managed container image registry that allows organizations to store, manage, and retrieve container images. ECR integrates with services such as Amazon ECS, Amazon EKS, and AWS Fargate, making it suitable for container deployment workflows. S3 Glacier is designed for archival storage, EFS provides file storage, and FSx provides managed file systems. Therefore, Amazon ECR is the appropriate service for securely storing private container images and making them available to container platforms during deployments.

Question 106

Which AWS service provides centralized audit logs for user and service API activity?

1. Amazon Inspector
2. AWS CloudTrail
3. Amazon Macie
4. AWS Shield

Correct Answer: 2

Explanation

AWS CloudTrail records API activity across an AWS environment. It provides information about actions performed through the AWS Management Console, AWS CLI, SDKs, and AWS services. These records are valuable for security investigations, compliance auditing, troubleshooting, and tracking administrative activity. Inspector assesses vulnerabilities, Macie focuses on sensitive data discovery, and Shield protects against DDoS attacks. Therefore, AWS CloudTrail is the correct service for maintaining an audit history of user and service API activity.

Question 107

A company wants to improve application availability by automatically replacing unhealthy EC2 instances. Which feature should be configured?

1. EC2 Auto Scaling health checks
2. S3 Lifecycle
3. AWS CloudTrail
4. Route 53 weighted routing

Correct Answer: 1

Explanation

EC2 Auto Scaling health checks can identify unhealthy instances and replace them automatically. When an instance fails its health check, the Auto Scaling group can terminate it and launch a replacement to maintain the desired capacity. This improves application resilience and reduces the need for manual intervention when individual instances fail. S3 Lifecycle manages object storage, CloudTrail records API activity, and Route 53 weighted routing distributes DNS traffic. Therefore, Auto Scaling health checks are the appropriate feature for automatically replacing unhealthy EC2 instances.

Question 108

Which AWS service provides a managed relational database compatible with Microsoft SQL Server?

1. Amazon DynamoDB
2. Amazon RDS
3. Amazon Neptune
4. Amazon OpenSearch Service

Correct Answer: 2

Explanation

Amazon RDS supports several relational database engines, including Microsoft SQL Server. RDS manages much of the underlying database infrastructure, including provisioning, backups, patching, and supported high-availability configurations. DynamoDB is a NoSQL database, Neptune is a graph database, and OpenSearch Service is designed for search and analytics. Using RDS allows organizations to run SQL Server workloads without manually managing the underlying database servers. Therefore, Amazon RDS is the appropriate service for a managed Microsoft SQL Server database.

Question 109

A company needs to allow an application in a private subnet to access the internet for software updates without allowing unsolicited inbound connections. Which solution should be used?

1. Internet gateway
2. NAT gateway
3. AWS Direct Connect
4. VPC peering

Correct Answer: 2

Explanation

A NAT gateway allows resources in private subnets to initiate outbound connections to the internet while preventing unsolicited inbound internet connections from reaching those resources. It is commonly deployed in a public subnet and referenced by the route table of private subnets. An internet gateway provides direct internet connectivity for resources with appropriate public addressing, while Direct Connect provides dedicated connectivity and VPC peering connects VPC networks. Therefore, a NAT gateway is the appropriate solution for controlled outbound internet access from private subnet resources.

Question 110

Which AWS service can provide automated backups and point-in-time recovery for DynamoDB tables?

1. DynamoDB backups
2. AWS DataSync
3. Amazon S3 Glacier
4. AWS Backup only

Correct Answer: 1

Explanation

Amazon DynamoDB provides backup capabilities that include point-in-time recovery, allowing a table to be restored to a specific point within the supported recovery window. This helps protect against accidental deletion, application errors, and other data integrity issues. DynamoDB backups are managed as part of the database service rather than requiring administrators to build a separate backup process. DataSync is for data transfers, Glacier is archival storage, and AWS Backup provides centralized backup management across supported services. Therefore, DynamoDB backup and point-in-time recovery capabilities are appropriate for protecting DynamoDB data.

Question 111

Which service allows an organization to centrally manage backups across multiple AWS services and accounts?

1. AWS Backup
2. AWS Config
3. AWS CloudTrail
4. Amazon GuardDuty

Correct Answer: 1

Explanation

AWS Backup provides centralized backup management across supported AWS services. Organizations can create backup plans, define schedules, establish retention policies, and monitor backup activity from a central service. In supported multi-account environments, AWS Backup can also help coordinate backup operations across accounts. Config focuses on resource configuration, CloudTrail records API activity, and GuardDuty detects threats. Therefore, AWS Backup is the appropriate service when an organization needs centralized and policy-based backup management across multiple AWS workloads.

Question 112

A company wants to prevent an S3 bucket from being deleted accidentally by an administrator. Which approach can provide additional protection?

1. S3 Versioning
2. MFA Delete
3. S3 Transfer Acceleration
4. S3 Lifecycle

Correct Answer: 2

Explanation

S3 MFA Delete can require multi-factor authentication for certain operations involving bucket versioning, including permanently deleting object versions and changing versioning state. This provides an additional protection layer against accidental or unauthorized destructive actions. S3 Versioning preserves multiple versions of objects but does not by itself require MFA for administrative operations. Transfer Acceleration improves transfer performance, while Lifecycle rules automate object transitions and expiration. Therefore, MFA Delete can provide additional protection for sensitive S3 deletion operations.

Question 113

Which AWS service is designed to manage hybrid file transfers using SFTP?

1. AWS Transfer Family
2. AWS DataSync
3. AWS DMS
4. Amazon EFS

Correct Answer: 1

Explanation

AWS Transfer Family provides fully managed file transfer services that support protocols such as SFTP, FTPS, and FTP. It can integrate with storage services such as Amazon S3 and Amazon EFS, allowing organizations to modernize traditional file transfer workflows without managing their own SFTP servers. DataSync focuses on automated data movement between storage environments, DMS is designed for database migration, and EFS provides file storage. Therefore, AWS Transfer Family is the appropriate service for managed SFTP-based file transfers.

Question 114

A company wants to automatically send an alert when an EC2 instance’s CPU utilization remains above 80%. Which CloudWatch feature should be used?

1. CloudWatch Logs
2. CloudWatch Alarm
3. CloudTrail trail
4. CloudWatch dashboard only

Correct Answer: 2

Explanation

A CloudWatch Alarm monitors a metric and performs an action when the metric crosses a defined threshold for a specified period. For example, an administrator can create an alarm that monitors EC2 CPU utilization and enters an alarm state when utilization remains above 80%. The alarm can then trigger notifications through supported integrations such as Amazon SNS. CloudWatch Logs stores log data, CloudTrail records API activity, and dashboards provide visualization. Therefore, a CloudWatch Alarm is the appropriate feature for threshold-based EC2 monitoring and alerting.

Question 115

Which AWS service can provide a centralized view of application and infrastructure performance metrics?

1. Amazon CloudWatch
2. AWS Organizations
3. Amazon Route 53
4. AWS Artifact

Correct Answer: 1

Explanation

Amazon CloudWatch provides monitoring and observability capabilities for AWS resources, applications, and services. It collects metrics and logs and can display information through dashboards. Organizations can use CloudWatch to monitor CPU utilization, latency, request counts, errors, and many other operational indicators. AWS Organizations manages multiple AWS accounts, Route 53 manages DNS, and Artifact provides compliance documentation. Therefore, CloudWatch is the appropriate service for obtaining centralized visibility into application and infrastructure performance metrics.

Question 116

A company wants to use a central service to route events from multiple AWS services to different targets based on event patterns. Which service should be used?

1. Amazon SQS
2. Amazon EventBridge
3. Amazon EFS
4. AWS Direct Connect

Correct Answer: 2

Explanation

Amazon EventBridge provides an event bus that can receive events from AWS services and supported applications. Rules can inspect event patterns and route matching events to different targets such as Lambda, SQS, Step Functions, and other services. This enables loosely coupled event-driven architectures. SQS provides message queues, EFS provides file storage, and Direct Connect provides dedicated network connectivity. Therefore, EventBridge is the appropriate service when an organization needs centralized event routing based on event patterns.

Question 117

Which AWS service provides a centralized repository for container images with vulnerability scanning support?

1. Amazon ECR
2. Amazon EFS
3. Amazon S3
4. Amazon RDS

Correct Answer: 1

Explanation

Amazon Elastic Container Registry provides managed storage for container images and integrates with AWS container services. ECR can support image scanning capabilities that help identify known vulnerabilities in container images. This makes it useful for organizations that need a private container registry integrated into their software delivery pipelines. EFS provides shared file storage, S3 provides object storage, and RDS provides managed relational databases. Therefore, Amazon ECR is the appropriate service for storing container images and incorporating security scanning into container workflows.

Question 118

A company wants to move an application from an on-premises VMware environment to AWS with minimal architectural changes. Which service can help run VMware workloads on AWS?

1. AWS Outposts
2. VMware Cloud on AWS
3. Amazon ECS
4. AWS Lambda

Correct Answer: 2

Explanation

VMware Cloud on AWS allows organizations to run supported VMware-based workloads on dedicated AWS infrastructure while retaining familiar VMware technologies and management approaches. This can simplify migrations where applications depend heavily on existing VMware environments and would be difficult to immediately redesign. AWS Outposts extends certain AWS infrastructure and services to customer locations but serves a different architectural purpose. ECS is a container service and Lambda provides serverless compute. Therefore, VMware Cloud on AWS is the most appropriate option for moving VMware workloads to AWS with minimal architectural changes.

Question 119

Which AWS service can analyze application and infrastructure logs using a search and analytics engine?

1. Amazon OpenSearch Service
2. Amazon RDS
3. Amazon DynamoDB
4. Amazon FSx

Correct Answer: 1

Explanation

Amazon OpenSearch Service provides managed search and analytics capabilities that can be used to analyze logs, application events, and other large datasets. It is commonly used for operational monitoring, log analytics, application troubleshooting, and security analysis. RDS provides relational databases, DynamoDB provides NoSQL storage, and FSx provides managed file systems. OpenSearch can integrate with other AWS services and data ingestion pipelines to create searchable and visualizable operational data. Therefore, Amazon OpenSearch Service is the appropriate choice for log search and analytics workloads.

Question 120

A company needs to provide private connectivity between two VPCs in the same AWS Region. Which option can be used for direct network communication?

1. VPC peering
2. Amazon CloudFront
3. AWS WAF
4. Amazon S3

Correct Answer: 1

Explanation

VPC peering creates a private network connection between two VPCs, allowing resources in the connected VPCs to communicate using private IP addresses. It can be used between VPCs in the same or different AWS Regions, subject to supported configurations. CloudFront is a content delivery service, WAF protects web applications, and S3 provides object storage. VPC peering is therefore an appropriate solution for direct private connectivity between two VPCs when the network architecture and scale make peering suitable.