{"id":15463,"date":"2026-09-18T05:19:56","date_gmt":"2026-09-18T05:19:56","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=15463"},"modified":"2026-09-18T05:19:56","modified_gmt":"2026-09-18T05:19:56","slug":"amazon-aws-certified-solutions-architect-professional-sap-c02-practice-test-questions-and-exam-dumps-part20-q381-400","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-solutions-architect-professional-sap-c02-practice-test-questions-and-exam-dumps-part20-q381-400\/","title":{"rendered":"Amazon AWS Certified Solutions Architect – Professional SAP-C02 Practice Test Questions and Exam Dumps Part20 Q381-400"},"content":{"rendered":"

<\/h1>\n

View Full <\/b>Amazon AWS Certified Solutions Architect – Professional SAP-C02 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 381<\/b><\/h3>\n

A company needs to route users to the AWS Region with the lowest network latency. Which Route 53 routing policy should be used?<\/b><\/p>\n

    \n
  1. Failover routing<\/span><\/li>\n
  2. Weighted routing<\/span><\/li>\n
  3. Latency-based routing<\/span><\/li>\n
  4. Geolocation routing<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Route 53 latency-based routing directs DNS queries toward the AWS Region that provides the lowest measured network latency for the user. This can improve application responsiveness when workloads are deployed across multiple Regions. Failover routing is designed for primary and secondary endpoints, weighted routing distributes traffic according to assigned weights, and geolocation routing considers the geographic location of the requester. Therefore, latency-based routing is appropriate when the primary requirement is directing users toward the Region expected to provide the lowest network latency.<\/span><\/p>\n

    Question 382<\/b><\/h3>\n

    A company needs a database that automatically replicates data across multiple AWS Regions and supports local reads and writes. Which service should be considered?<\/b><\/p>\n

      \n
    1. Amazon DynamoDB Global Tables<\/span><\/li>\n
    2. Amazon RDS Read Replicas<\/span><\/li>\n
    3. Amazon ElastiCache<\/span><\/li>\n
    4. Amazon Redshift<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Amazon DynamoDB Global Tables provide a multi-Region, multi-active database architecture in which applications can read and write data locally in participating Regions. DynamoDB handles replication between the tables and is designed for globally distributed applications requiring high availability and low-latency regional access. RDS Read Replicas primarily provide read scaling, ElastiCache is an in-memory caching service, and Redshift is designed for analytics and data warehousing. Therefore, DynamoDB Global Tables should be considered for globally distributed applications requiring multi-Region data access.<\/span><\/p>\n

      Question 383<\/b><\/h3>\n

      A company wants to move large amounts of data from an on-premises environment to AWS when network bandwidth is insufficient. Which solution should be evaluated?<\/b><\/p>\n

        \n
      1. AWS DataSync<\/span><\/li>\n
      2. AWS Snowball<\/span><\/li>\n
      3. Amazon CloudFront<\/span><\/li>\n
      4. AWS Private CA<\/span><\/li>\n<\/ol>\n

        Correct Answer: 2<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        AWS Snowball provides physical data transfer appliances that can be shipped between AWS and customer locations. It is useful when organizations need to transfer very large datasets but available network bandwidth would make online migration impractical or excessively slow. DataSync is better suited to automated online transfers over available network connectivity. CloudFront provides content delivery, while Private CA manages private certificates. Therefore, Snowball should be evaluated when network limitations make transferring large datasets electronically impractical.<\/span><\/p>\n

        Question 384<\/b><\/h3>\n

        A company operates a web application in multiple AWS Regions and wants users to access the application through a single static anycast IP address while improving global network performance. Which service is appropriate?<\/b><\/p>\n

          \n
        1. Amazon Route 53 Resolver<\/span><\/li>\n
        2. AWS Global Accelerator<\/span><\/li>\n
        3. Amazon CloudFront Functions<\/span><\/li>\n
        4. NAT Gateway<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          AWS Global Accelerator provides static anycast IP addresses that serve as fixed entry points for applications deployed across multiple AWS Regions. It uses the AWS global network to route user traffic toward healthy regional endpoints and can improve performance by using optimized network paths. Route 53 Resolver handles DNS resolution, CloudFront Functions provide lightweight edge processing, and NAT Gateway provides outbound connectivity from private subnets. Therefore, Global Accelerator is appropriate when applications need static global entry points and optimized routing across Regions.<\/span><\/p>\n

          Question 385<\/b><\/h3>\n

          A company wants to make an existing application accessible through an API while keeping backend services inside a private VPC. Which API Gateway feature should be evaluated?<\/b><\/p>\n

            \n
          1. API Gateway private integration using VPC Link<\/span><\/li>\n
          2. Public S3 website hosting<\/span><\/li>\n
          3. NAT Gateway with a public IP<\/span><\/li>\n
          4. Route 53 geolocation routing<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Amazon API Gateway VPC Link can provide private connectivity from API Gateway to supported resources within a VPC, allowing APIs to expose backend services without making those services directly accessible from the public internet. This is useful for applications where load balancers or other private services handle the backend workload. S3 website hosting and Route 53 geolocation routing address different requirements, while NAT Gateway is designed for outbound connectivity. Therefore, VPC Link should be evaluated for private API-to-VPC integration.<\/span><\/p>\n

            Question 386<\/b><\/h3>\n

            A company needs to retain backups for seven years and ensure that even privileged administrators cannot delete them before the retention period ends. Which solution is most appropriate?<\/b><\/p>\n

              \n
            1. AWS Backup Vault Lock<\/span><\/li>\n
            2. S3 Transfer Acceleration<\/span><\/li>\n
            3. Amazon Inspector<\/span><\/li>\n
            4. AWS Systems Manager<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              AWS Backup Vault Lock can enforce retention controls on recovery points and help prevent protected backups from being deleted or modified before the required retention period expires. This capability is useful for organizations with regulatory, compliance, or ransomware-resilience requirements. Transfer Acceleration improves S3 data transfer performance, Inspector identifies software vulnerabilities, and Systems Manager provides operational management. Therefore, Backup Vault Lock is the appropriate solution when backups must remain protected for a long, enforced retention period.<\/span><\/p>\n

              Question 387<\/b><\/h3>\n

              A company wants to process messages from an SQS queue and automatically move messages that repeatedly fail processing to a separate queue for investigation. Which feature should be configured?<\/b><\/p>\n

                \n
              1. SNS message filtering<\/span><\/li>\n
              2. SQS dead-letter queue<\/span><\/li>\n
              3. CloudTrail event selector<\/span><\/li>\n
              4. EventBridge archive<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                An Amazon SQS dead-letter queue, or DLQ, stores messages that cannot be successfully processed after a configured number of receive attempts. A redrive policy determines when messages should be moved to the DLQ. This prevents repeatedly failing messages from continuously blocking or consuming resources in the primary queue and allows operators to investigate problematic messages separately. SNS filtering controls message delivery, CloudTrail records API activity, and EventBridge archives preserve events. Therefore, an SQS dead-letter queue is appropriate for failed message handling.<\/span><\/p>\n

                Question 388<\/b><\/h3>\n

                A company wants to run a relational database workload with unpredictable demand and avoid manually changing database instance capacity. Which option should be evaluated?<\/b><\/p>\n

                  \n
                1. Amazon Aurora Serverless v2<\/span><\/li>\n
                2. Amazon EBS<\/span><\/li>\n
                3. Amazon Redshift Spectrum<\/span><\/li>\n
                4. Amazon Neptune<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Amazon Aurora Serverless v2 can automatically adjust Aurora database capacity based on application demand within configured limits. This makes it useful for workloads with variable or unpredictable database usage where manually resizing database instances would create operational overhead. EBS provides block storage, Redshift Spectrum supports querying external data from Redshift, and Neptune is a graph database. Therefore, Aurora Serverless v2 should be evaluated when a relational workload requires flexible capacity that can respond automatically to changing demand.<\/span><\/p>\n

                  Question 389<\/b><\/h3>\n

                  A company wants to automatically trigger a sequence of AWS services when a new customer account is created. The process includes validation, resource creation, and notification. Which service is best suited for coordinating these steps?<\/b><\/p>\n

                    \n
                  1. Amazon SQS<\/span><\/li>\n
                  2. AWS Step Functions<\/span><\/li>\n
                  3. Amazon CloudFront<\/span><\/li>\n
                  4. Amazon Macie<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    AWS Step Functions provides workflow orchestration for coordinating multiple application or AWS service operations. A workflow can define sequential steps, branching, retries, error handling, and service integrations. This makes it suitable for account provisioning processes that require validation, resource creation, and notification. SQS provides asynchronous message queuing, CloudFront distributes content, and Macie identifies sensitive data. Therefore, Step Functions is the appropriate service for coordinating a multi-step automated account provisioning workflow.<\/span><\/p>\n

                    Question 390<\/b><\/h3>\n

                    A company wants to analyze data stored in S3 using Amazon Redshift without first loading all of the data into Redshift tables. Which capability should be considered?<\/b><\/p>\n

                      \n
                    1. Redshift Spectrum<\/span><\/li>\n
                    2. Amazon ElastiCache<\/span><\/li>\n
                    3. AWS DataSync<\/span><\/li>\n
                    4. Amazon SQS<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Amazon Redshift Spectrum allows Redshift users to query data stored directly in Amazon S3 using SQL. This enables organizations to analyze external datasets without loading every object into local Redshift storage. It is useful for extending analytical workloads across data stored in a data lake. ElastiCache provides in-memory caching, DataSync transfers data between storage systems, and SQS provides message queuing. Therefore, Redshift Spectrum should be considered when Redshift workloads need to query large datasets residing in S3.<\/span><\/p>\n

                      Question 391<\/b><\/h3>\n

                      A company wants to allow users to authenticate to an application and also obtain temporary AWS credentials to access AWS resources directly. Which Amazon Cognito capability should be considered?<\/b><\/p>\n

                        \n
                      1. Amazon Cognito user pools only<\/span><\/li>\n
                      2. Amazon Cognito identity pools<\/span><\/li>\n
                      3. AWS CloudTrail<\/span><\/li>\n
                      4. IAM permissions boundaries<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Amazon Cognito identity pools can provide applications with temporary AWS credentials for authenticated or supported unauthenticated users. These credentials can allow users to access specified AWS resources according to IAM roles and policies. Cognito user pools primarily provide user directories and application authentication, while CloudTrail records AWS API activity and permissions boundaries restrict maximum IAM permissions. Therefore, identity pools should be considered when authenticated application users need temporary AWS credentials to access AWS resources directly.<\/span><\/p>\n

                        Question 392<\/b><\/h3>\n

                        A company wants to reduce the time required to launch EC2 instances from frequently used EBS snapshots. Which capability should be evaluated?<\/b><\/p>\n

                          \n
                        1. EBS Fast Snapshot Restore<\/span><\/li>\n
                        2. S3 Intelligent-Tiering<\/span><\/li>\n
                        3. AWS Backup Vault Lock<\/span><\/li>\n
                        4. EC2 Instance Store<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Amazon EBS Fast Snapshot Restore enables volumes created from selected snapshots to achieve full performance more quickly after creation. Without this capability, newly restored volumes may initially experience performance limitations while blocks are initialized. Fast Snapshot Restore can be valuable for workloads that need predictable storage performance immediately after launching instances or restoring volumes. S3 Intelligent-Tiering manages object-storage access tiers, Backup Vault Lock protects recovery points, and Instance Store provides temporary local storage. Therefore, Fast Snapshot Restore should be evaluated for rapid volume initialization.<\/span><\/p>\n

                          Question 393<\/b><\/h3>\n

                          A company wants to run an application across physically separated EC2 hardware to reduce the chance that a single hardware failure affects multiple instances. Which placement strategy is appropriate?<\/b><\/p>\n

                            \n
                          1. Cluster placement group<\/span><\/li>\n
                          2. Spread placement group<\/span><\/li>\n
                          3. Partition placement group<\/span><\/li>\n
                          4. Auto Scaling mixed instances policy<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 2<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            A spread placement group places instances across distinct underlying hardware to reduce correlated hardware failures. It is useful for applications where individual instances are important and the organization wants to minimize the possibility that one hardware failure affects several instances simultaneously. Cluster placement groups optimize low-latency communication, while partition placement groups isolate groups of instances for distributed workloads. An Auto Scaling mixed instances policy is unrelated to physical placement. Therefore, a spread placement group is appropriate for reducing correlated hardware failure risk.<\/span><\/p>\n

                            Question 394<\/b><\/h3>\n

                            A company wants to centrally manage backups across multiple AWS accounts and copy recovery points to another Region for disaster recovery. Which approach should be considered?<\/b><\/p>\n

                              \n
                            1. AWS Backup with cross-account and cross-Region backup policies<\/span><\/li>\n
                            2. CloudFront with multiple distributions<\/span><\/li>\n
                            3. SQS with FIFO queues<\/span><\/li>\n
                            4. Route 53 weighted routing<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              AWS Backup can centrally manage backup policies across supported AWS resources and accounts. Organizations can configure cross-account backup strategies and copy recovery points to another Region, improving protection against account-level or regional failures. Centralized backup policies also simplify governance and standardize retention requirements. CloudFront manages content delivery, SQS provides messaging, and Route 53 handles DNS routing. Therefore, AWS Backup with cross-account and cross-Region capabilities is appropriate for centralized disaster recovery protection.<\/span><\/p>\n

                              Question 395<\/b><\/h3>\n

                              A company wants to process events from multiple sources through a reusable pipeline that can filter, enrich, and deliver events to a target without developing a custom integration service. Which capability should be considered?<\/b><\/p>\n

                                \n
                              1. EventBridge Pipes<\/span><\/li>\n
                              2. Amazon EBS<\/span><\/li>\n
                              3. AWS Snowball<\/span><\/li>\n
                              4. Amazon WorkSpaces<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Amazon EventBridge Pipes provides point-to-point integrations between event sources and targets and can apply filtering and enrichment during processing. This can reduce the need to build custom polling or transformation services for common event-driven integration patterns. Pipes can connect supported sources such as SQS, Kinesis, and DynamoDB Streams with supported targets while applying processing steps. EBS provides block storage, Snowball supports physical data transfer, and WorkSpaces provides virtual desktops. Therefore, EventBridge Pipes should be considered for streamlined event processing pipelines.<\/span><\/p>\n

                                Question 396<\/b><\/h3>\n

                                A company wants to reduce AWS compute costs for a stable workload while retaining flexibility to use different EC2 instance families and sizes. Which purchasing model should be evaluated?<\/b><\/p>\n

                                  \n
                                1. Dedicated Hosts<\/span><\/li>\n
                                2. EC2 Spot Instances<\/span><\/li>\n
                                3. Compute Savings Plans<\/span><\/li>\n
                                4. On-Demand Instances<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Compute Savings Plans provide discounted compute pricing in exchange for a commitment to a consistent amount of compute usage over a selected term. They offer flexibility across eligible compute usage, including different EC2 instance families, sizes, operating systems, and Regions. Spot Instances may provide deeper discounts but can be interrupted, while Dedicated Hosts address physical server requirements and On-Demand Instances provide flexibility without a long-term commitment. Therefore, Compute Savings Plans should be evaluated for stable workloads where cost savings and compute flexibility are both important.<\/span><\/p>\n

                                  Question 397<\/b><\/h3>\n

                                  A company needs a file system for Windows applications that relies on SMB and integrates with Microsoft Active Directory. Which service should be selected?<\/b><\/p>\n

                                    \n
                                  1. Amazon EFS<\/span><\/li>\n
                                  2. Amazon FSx for Windows File Server<\/span><\/li>\n
                                  3. Amazon S3<\/span><\/li>\n
                                  4. Amazon FSx for Lustre<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Amazon FSx for Windows File Server provides managed Windows file storage using the SMB protocol and supports integration with Microsoft Active Directory. It is designed for Windows-based applications that require shared file systems and Windows-compatible access controls. EFS is primarily designed for Linux workloads using NFS, S3 provides object storage, and FSx for Lustre is optimized for high-performance Linux workloads. Therefore, FSx for Windows File Server is the appropriate choice for applications requiring SMB and Active Directory integration.<\/span><\/p>\n

                                    Question 398<\/b><\/h3>\n

                                    A company wants to continuously discover potential security relationships and help security analysts investigate how resources, users, and activities may be connected. Which service should be considered?<\/b><\/p>\n

                                      \n
                                    1. Amazon Detective<\/span><\/li>\n
                                    2. Amazon Macie<\/span><\/li>\n
                                    3. AWS Cost Explorer<\/span><\/li>\n
                                    4. Amazon CloudFront<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Amazon Detective helps security teams investigate potential security issues by analyzing and correlating data from supported AWS sources. It provides visualizations and context around relationships between resources, users, API activity, and other security-relevant events. This can help analysts understand the sequence and scope of suspicious activity after a security finding occurs. Macie focuses on sensitive data discovery, Cost Explorer analyzes spending, and CloudFront provides content delivery. Therefore, Amazon Detective should be considered for security investigation and relationship analysis.<\/span><\/p>\n

                                      Question 399<\/b><\/h3>\n

                                      A company wants to deploy a standardized infrastructure configuration to dozens of AWS accounts whenever a new account joins its organization. Which solution is most appropriate?<\/b><\/p>\n

                                        \n
                                      1. Manually configure each account<\/span><\/li>\n
                                      2. CloudFormation StackSets<\/span><\/li>\n
                                      3. Amazon Inspector<\/span><\/li>\n
                                      4. AWS DataSync<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        CloudFormation StackSets allows an organization to deploy the same infrastructure templates across multiple AWS accounts and Regions from a centralized management model. It is useful for standardized infrastructure such as logging resources, IAM-related configurations, or baseline operational services. StackSets can be integrated with organizational structures to simplify deployment as accounts are added. Manual configuration is difficult to maintain consistently, Inspector performs vulnerability assessments, and DataSync transfers data. Therefore, CloudFormation StackSets is appropriate for standardized multi-account infrastructure deployment.<\/span><\/p>\n

                                        Question 400<\/b><\/h3>\n

                                        A company wants to identify AWS resources that are overprovisioned or underutilized and receive recommendations for improving compute efficiency. Which service should be evaluated?<\/b><\/p>\n

                                          \n
                                        1. AWS Compute Optimizer<\/span><\/li>\n
                                        2. Amazon Route 53<\/span><\/li>\n
                                        3. AWS Private Certificate Authority<\/span><\/li>\n
                                        4. Amazon SNS<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          AWS Compute Optimizer analyzes supported AWS resources and provides recommendations based on observed utilization and configuration data. It can identify opportunities to rightsize certain compute resources and improve cost or performance efficiency. This can help organizations make data-driven decisions instead of manually estimating resource requirements. Route 53 provides DNS services, Private CA manages private certificates, and SNS provides publish-subscribe messaging. Therefore, Compute Optimizer should be evaluated when an organization needs recommendations for improving the efficiency of supported AWS compute resources.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Amazon AWS Certified Solutions Architect – Professional SAP-C02 Exam Dumps and Practice Test Dumps.   Question 381 A company needs to route users to the AWS Region with the lowest network latency. Which Route 53 routing policy should be used? Failover routing Weighted routing Latency-based routing Geolocation routing Correct Answer: 3 Explanation Route […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15463"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=15463"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15463\/revisions"}],"predecessor-version":[{"id":15468,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15463\/revisions\/15468"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=15463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=15463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=15463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}