SAP-C02 Free Practice Test

- (Exam Topic 2)
A company has a media metadata extraction pipeline running on AWS. Notifications containing a reference to a file Amazon S3 are sent to an Amazon Simple Notification Service (Amazon SNS) topic The pipeline consists of a number of AWS Lambda functions that are subscribed to the SNS topic The Lambda functions extract the S3 file and write metadata to an Amazon RDS PostgreSQL DB instance.
Users report that updates to the metadata are sometimes stow to appear or are lost. During these times, the CPU utilization on the database is high and the number of failed Lambda invocations increases.
Which combination of actions should a solutions architect take to r-e'p resolve this issue? (Select TWO.)

1. A. Enable massage delivery status on the SNS topic Configure the SNS topic delivery policy to enable retries with exponential backoff
2. B. Create an Amazon Simple Queue Service (Amazon SOS) FIFO queue and subscribe the queue to the SNS topic Configure the Lambda functions to consume messages from the SQS queue.
3. C. Create an RDS proxy for the RDS instance Update the Lambda functions to connect to the RDS instance using the proxy.
4. D. Enable the RDS Data API for the RDS instanc
5. E. Update the Lambda functions to connect to the RDS instance using the Data API
6. F. Create an Amazon Simple Queue Service (Amazon SQS) standard queue for each Lambda function and subscribe the queues to the SNS topi
7. G. Configure the Lambda functions to consume messages from their respective SQS queue.

Correct Answer: CE

- (Exam Topic 2)
a company needs to create a centralized logging architecture for all of its AWS accounts. The architecture should provide near-real-time data analysis for all AWS CloudTrail logs and VPC Flow logs across an AWS accounts. The company plans to use Amazon Elasticsearch Service (Amazon ES) to perform log analyses in me logging account.
Which strategy should a solutions architect use to meet These requirements?

1. A. Configure CloudTrail and VPC Flow Logs m each AWS account to send data to a centralized Amazon S3 Ducket in the fogging accoun
2. B. Create an AWS Lambda function to load data from the S3 bucket to Amazon ES m the togging account
3. C. Configure CloudTrail and VPC Flow Logs to send data to a fog group m Amazon CloudWatch Logs n each AWS account Configure a CloudWatch subscription filter m each AWS account to send data to Amazon Kinesis Data Firehose In the fogging account Load data from Kinesis Data Firehose Into Amazon ES in the logging account
4. D. Configure CloudTrail and VPC Flow Logs to send data to a separate Amazon S3 bucket In each AWS accoun
5. E. Create an AWS Lambda function triggered by S3 evens to copy the data to a centralized logging bucke
6. F. Create another Lambda function lo load data from the S3 bucket to Amazon ES in the logging account.
7. G. Configure CloudTrail and VPC Flow Logs to send data to a fog group in Amazon CloudWatch Logs n each AWS account Create AWS Lambda functions in each AWS account to subscribe to the tog groups and stream the data to an Amazon S3 bucket in the togging accoun
8. H. Create another Lambda function to toad data from the S3 bucket to Amazon ES in the logging account.

Correct Answer: A

- (Exam Topic 2)
A company is planning to migrate an Amazon RDS for Oracle database to an RDS for PostgreSQL DB instance in another AWS account A solutions architect needs to design a migration strategy that will require no downtime and that will minimize the amount of time necessary to complete the migration The migration strategy must replicate all existing data and any new data that is created during the migration The target database must be identical to the source database at completion of the migration process
All applications currently use an Amazon Route 53 CNAME record as their endpoint for communication with the RDS for Oracle DB instance The RDS for Oracle DB instance is in a private subnet
Which combination of steps should the solutions architect take to meet these requirements? (Select THREE )

1. A. Create a new RDS for PostgreSQL DB instance in the target account Use the AWS Schema Conversion Tool (AWS SCT) to migrate the database schema from the source database to the target database.
2. B. Use the AWS Schema Conversion Tool (AWS SCT) to create a new RDS for PostgreSQL DB instance in the target account with the schema and initial data from the source database
3. C. Configure VPC peering between the VPCs in the two AWS accounts to provide connectivity to both DB instances from the target accoun
4. D. Configure the security groups that are attached to each DB instance to allow traffic on the database port from the VPC in the target account
5. E. Temporarily allow the source DB instance to be publicly accessible to provide connectivity from the VPC in the target account Configure the security groups that are attached to each DB instance to allow traffic on the database port from the VPC in the target account.
6. F. Use AWS Database Migration Service (AWS DMS) in the target account to perform a full load plus change data capture (CDC) migration from the source database to the target database When the migration is complete, change the CNAME record to point to the target DB instance endpoint
7. G. Use AWS Database Migration Service (AWS DMS) in the target account to perform a change data capture (CDC) migration from the source database to the target database When the migration is complete change the CNAME record to point to the target DB instance endpoint

Correct Answer: BCE

- (Exam Topic 1)
A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region. The company's on-premises network uses the connection to communicate with the company's resources in the AWS Cloud. The connection has a single private virtual interface that connects to a single VPC.
A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region. The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.
Which solution meets these requirements?

1. A. Provision a Direct Connect gatewa
2. B. Delete the existing private virtual interface from the existing connectio
3. C. Create the second Direct Connect connectio
4. D. Create a new private virtual interlace on each connection, and connect both private victual interfaces to the Direct Connect gatewa
5. E. Connect the Direct Connect gateway to the single VPC.
6. F. Keep the existing private virtual interfac
7. G. Create the second Direct Connect connectio
8. H. Create a new private virtual interface on the new connection, and connect the new private virtual interface to the single VPC.
9. I. Keep the existing private virtual interfac
10. J. Create the second Direct Connect connectio
11. K. Create a new public virtual interface on the new connection, and connect the new public virtual interface to the single VPC.
12. L. Provision a transit gatewa
13. M. Delete the existing private virtual interface from the existing connection.Create the second Direct Connect connectio
14. N. Create a new private virtual interface on each connection, and connect both private virtual interfaces to the transit gatewa
15. O. Associate the transit gateway with the single VPC.

Correct Answer: A
A Direct Connect gateway is a globally available resource. You can create the Direct Connect gateway in any Region and access it from all other Regions. The following describe scenarios where you can use a Direct Connect gateway.
https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-gateways-intro.html

- (Exam Topic 1)
A company has many AWS accounts and uses AWS Organizations to manage all of them. A solutions architect must implement a solution that the company can use to share a common network across multiple accounts.
The company's infrastructure team has a dedicated infrastructure account that has a VPC. The infrastructure team must use this account to manage the network. Individual accounts cannot have the ability to manage their own networks. However, individual accounts must be able to create AWS resources within subnets.
Which combination of actions should the solutions architect perform to meet these requirements? (Select TWO.)

1. A. Create a transit gateway in the infrastructure account.
2. B. Enable resource sharing from the AWS Organizations management account.
3. C. Create VPCs in each AWS account within the organization in AWS Organization
4. D. Configure the VPCs to share the same CIDR range and subnets as the VPC in the infrastructure accoun
5. E. Peer the VPCs in each individual account with the VPC in the infrastructure account,
6. F. Create a resource share in AWS Resource Access Manager in the infrastructure accoun
7. G. Select thespecific AWS Organizations OU that will use the shared networ
8. H. Select each subnet to associate with the resource share.
9. I. Create a resource share in AWS Resource Access Manager in the infrastructure accoun
10. J. Select the specific AWS Organizations OU that will use the shared networ
11. K. Select each prefix list to associate with the resource share.

Correct Answer: CE
https://docs.aws.amazon.com/vpc/latest/userguide/sharing-managed-prefix-lists.html