Get Your CertSAP-C02PlayCompete
‹ SAP-C02 tests

AWS Certified Solutions Architect – Professional (SAP-C02) practice questions

100 questions in 10 tests. Open one to answer it on its own, or take a whole test.

Test 1

Take Test 1 ›
  1. A financial services company runs 40 AWS accounts in a single organization in AWS Organizations with all features enabled. A recent audit produced two mandatory, non-negotiable… · Organizational Complexity
  2. An enterprise manages 120 AWS accounts that were provisioned through AWS Control Tower Account Factory and are organized into OUs by environment. All 4,000 employees already… · Organizational Complexity
  3. A media company operates 60 VPCs spread across 12 AWS accounts in two Regions, us-east-1 and eu-west-1. On-premises data centres terminate two 10 Gbps AWS Direct Connect… · Hybrid Networking
  4. After migrating several applications into a multi-account, multi-VPC environment connected to two on-premises data centres by AWS Direct Connect, an operations team reports two… · Hybrid Networking
  5. A gaming company is designing a new serverless leaderboard API built on Amazon API Gateway, AWS Lambda, and Amazon DynamoDB. Players are concentrated in North America and Europe… · Design for New Solutions
  6. A retailer's data centre lease expires in six months and 800 VMware virtual machines (a mix of Windows Server and Linux, running commercial off-the-shelf and in-house… · Migration and Modernization
  7. An insurance company must retire an 8 TB on-premises Oracle database that backs a claims application and move it to Amazon Aurora PostgreSQL-Compatible Edition to escape Oracle… · Migration and Modernization
  8. Following a regional outage postmortem, an online booking platform must be given a cross-Region disaster recovery capability. The workload runs today in us-east-1 only: Amazon… · Continuous Improvement
  9. A media analytics platform stores 4 PB of rendered video segments and derived metadata files in a single Amazon S3 bucket, all in the S3 Standard storage class. Objects range… · Continuous Improvement
  10. Analysts complain that ad hoc queries over an existing clickstream data lake have become unusable. Amazon Data Firehose lands about 12 TB of gzipped JSON per day into… · Continuous Improvement

Test 2

Take Test 2 ›
  1. A company runs 90 AWS accounts in one organization in AWS Organizations with all features enabled. Finance wants monthly chargeback by cost centre, but the first attempt failed… · Organizational Complexity
  2. A network team centralized east-west traffic inspection for 25 spoke VPCs. Every spoke VPC is attached to one transit gateway. The spoke route table sends 0.0.0.0/0 to an… · Organizational Complexity
  3. A software company already runs an AWS Control Tower landing zone. Its platform engineering team standardized on Terraform years ago and has no CloudFormation skills. The team… · Organizational Complexity
  4. An online brokerage is designing a new order-event pipeline. When a customer's order changes state (placed, partially filled, filled, cancelled), the order service publishes an… · Design for New Solutions
  5. A company is building a platform on Amazon EKS. It will run about 30 clusters across several accounts, and clusters are routinely created and destroyed as part of blue/green… · Design for New Solutions
  6. A real-time ad bidding service is being designed on Amazon DynamoDB. For every bid request, the service reads a small campaign-settings item and a budget-pacing item, and a… · Design for New Solutions
  7. A retailer moved its checkout API from EC2 instances to AWS Lambda. The functions connect to an Amazon Aurora MySQL-Compatible Edition cluster. During flash sales, Lambda… · Continuous Improvement
  8. An insurance quoting application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. Each new instance needs about 12 minutes before it can… · Continuous Improvement
  9. A research institute is moving an analytics platform to AWS. Its 350 TB of research data (about 400 million files) lives on an on-premises NFS NAS, and the target is Amazon EFS… · Migration and Modernization
  10. A logistics company is migrating a portfolio of Java applications to AWS. About 40 of them exchange messages through a self-managed Apache ActiveMQ Classic broker on premises… · Migration and Modernization

Test 3

Take Test 3 ›
  1. A retailer runs 25 AWS accounts in one organization in AWS Organizations, one per product team. Each team built its own VPC, and the RFC 1918 range that the enterprise network… · Organizational Complexity
  2. A payments processor connects its primary data centre to AWS with two 10 Gbps dedicated AWS Direct Connect connections. Both connections were ordered at the same Direct Connect… · Hybrid Networking
  3. An internal audit has asked a company with 60 AWS accounts in AWS Organizations to produce a single, tamper-resistant record of management API activity across every account and… · Organizational Complexity
  4. A lender is rebuilding its loan origination process. A submitted application runs through automated credit checks, then pauses for a human underwriter who typically responds… · Design for New Solutions
  5. A SaaS product runs on Amazon Aurora MySQL-Compatible Edition in us-east-1. A growing European user base now generates about a third of the traffic, and those users see 90 ms to… · Design for New Solutions
  6. A SaaS company stores data for 9,000 tenants in a single pooled Amazon DynamoDB table whose partition key is tenantId and whose sort key is recordId. Mobile clients authenticate… · Design for New Solutions
  7. A news publisher serves 2.5 million requests per second at peak through Amazon CloudFront. A Lambda@Edge function on the viewer request event does two things: it rewrites legacy… · Continuous Improvement
  8. A company's monthly compute bill is roughly 60 percent Amazon EC2 On-Demand across eight instance families in three Regions, 25 percent AWS Fargate, and 15 percent AWS Lambda… · Continuous Improvement
  9. A manufacturer is closing a data centre that hosts 40 TB of departmental SMB file shares on two ageing Windows Server file servers. The servers are joined to an on-premises… · Migration and Modernization
  10. A logistics company is breaking a monolithic Java application, running on Amazon EC2 behind an Application Load Balancer, into containerized services on Amazon ECS. The plan is… · Migration and Modernization

Test 4

Take Test 4 ›
  1. A company runs 300 accounts in AWS Organizations across four AWS Regions, and its platform team creates new accounts most weeks. A central security operations team, which works… · Organizational Complexity
  2. A bank exposes an internal fraud-scoring API from a provider VPC in a shared services account. The API must be reachable from 120 consumer VPCs spread over 40 accounts. Many of… · Hybrid Networking
  3. An order management service publishes about 4,000 business events per minute. Six downstream teams, each in its own AWS account inside the same organization, consume these… · Design for New Solutions
  4. An aerospace firm runs computational fluid dynamics simulations on 200 EC2 instances using Open MPI. The job is tightly coupled: every solver iteration ends with a collective… · Design for New Solutions
  5. A healthcare platform encrypts patient documents on the client side with the AWS Encryption SDK before storing the ciphertext, using a customer managed AWS KMS key in us-east-1… · Design for New Solutions
  6. A trading firm runs a self-managed PostgreSQL database on Nitro-based EC2 instances. Two changes are being made at once. The workload has grown and now needs a sustained 120,000… · Continuous Improvement
  7. An insurer runs an active-passive workload in us-east-1 and eu-west-1, with Amazon Route 53 failover records and an HTTP health check against a /health endpoint deciding where… · Continuous Improvement
  8. A cost review shows that NAT gateway data processing charges have become the third largest line item on a company's bill. Investigation finds that EC2 instances and containers in… · Continuous Improvement
  9. A retailer must move a 6 TB self-managed MySQL 8.0 database from its data centre to Amazon Aurora MySQL-Compatible Edition. A 10 Gbps AWS Direct Connect connection is already in… · Migration and Modernization
  10. A manufacturer is migrating Windows Server and SQL Server workloads to AWS under a bring-your-own- license agreement. The licences are counted per physical core and the vendor's… · Migration and Modernization

Test 5

Take Test 5 ›
  1. An engineering organization has 800 project teams working across 200 AWS accounts. Access is granted through AWS IAM Identity Center federated to the company's external identity… · Organizational Complexity
  2. A regulator has told a financial firm to prove that data held in Amazon S3 cannot be read by any identity outside the firm's own AWS organization. The firm has 150 member… · Organizational Complexity
  3. A company runs 60 spoke VPCs that are already attached to a transit gateway in a shared network account. Each spoke VPC runs its own NAT gateway in each of two Availability… · Hybrid Networking
  4. An insurer exposes an internal claims API through a regional Amazon API Gateway REST API. Access is currently limited by a resource policy that allows a list of public IP… · Design for New Solutions
  5. A central data platform account holds a 900 TB data lake in Amazon S3, catalogued in the AWS Glue Data Catalog. Nine business-unit accounts in the same organization need to query… · Design for New Solutions
  6. A studio runs the backend for a multiplayer game on EC2 instances behind Network Load Balancers in three Regions. Game clients hold a long-lived UDP session for gameplay and a… · Design for New Solutions
  7. An order platform runs on an Amazon Aurora PostgreSQL-Compatible Edition cluster with one writer and one reader. Every component of the application (the transactional order… · Continuous Improvement
  8. After a ransomware incident at a competitor in which the attacker deleted the victim's backups before encrypting production, a brokerage has been told by its regulator to make… · Continuous Improvement
  9. A retailer runs about 400 scheduled jobs from crontab on two "utility" EC2 instances in a single Availability Zone. The jobs start Amazon ECS tasks, invoke AWS Lambda functions… · Migration and Modernization
  10. A utility is migrating a suite of .NET and SQL Server applications to Amazon EC2. The applications authenticate users with Kerberos and read group membership from the company's… · Migration and Modernization

Test 6

Take Test 6 ›
  1. A platform team must place a standard security baseline (an incident response IAM role, a log forwarding configuration, and a set of AWS Config rules) into all 140 accounts of… · Organizational Complexity
  2. A group operates about 400 VPCs across 120 accounts in five Regions, all attached to transit gateways. CIDR blocks have been handed out from a spreadsheet maintained by two… · Hybrid Networking
  3. A payments API runs active in eu-west-1 with a pilot light standby in eu-central-1. Database credentials and third-party API keys are held in AWS Secrets Manager in eu-west-1… · Design for New Solutions
  4. A genomics company runs a nightly analysis pipeline. Each run submits about 40,000 containerized jobs. Individual jobs take between 20 and 90 minutes. The alignment stage needs… · Design for New Solutions
  5. A computer vision team trains models on 32 GPU instances at a time. The training corpus is 60 TB of images and annotation files that lives in Amazon S3, which the data… · Design for New Solutions
  6. A checkout transaction crosses six AWS accounts: an edge account, two service accounts, a payments account, and two data accounts. During a recent incident, the on-call engineer… · Continuous Improvement
  7. A finance business partner has asked the cloud team to cut compute spend across 90 AWS accounts without a performance regression. The estate includes thousands of EC2 instances… · Continuous Improvement
  8. An auditor has given a logistics company three requirements for its 4,000 EC2 instances (a mix of Windows Server and several Linux distributions) spread over 60 accounts in four… · Continuous Improvement
  9. An order management platform runs on Microsoft SQL Server Enterprise Edition in a leased data centre. The lease ends in nine months. Commercial database licensing is the single… · Migration and Modernization
  10. A telemetry platform runs Apache Kafka on 15 self-managed EC2 broker instances plus a separate Apache ZooKeeper ensemble. Roughly 60 producer and consumer applications use the… · Migration and Modernization

Test 7

Take Test 7 ›
  1. A central image-factory account builds hardened golden AMIs with an automated pipeline. The AMIs' EBS snapshots are encrypted with the default AWS managed key for EBS (aws/ebs)… · Organizational Complexity
  2. A company has 60 AWS accounts in an AWS Organization. The security team wants every account to take daily backups of all tagged Amazon RDS databases and EBS volumes and keep them… · Organizational Complexity
  3. A company requires that every Amazon EC2 instance in every account of its AWS Organization launches only from AMIs that come from the company's golden-image account or from… · Organizational Complexity
  4. A software vendor publishes a REST API through Amazon API Gateway to about 200 customers. A free tier must be limited to 1,000 requests per day and 5 requests per second per… · Design for New Solutions
  5. An order platform publishes events to a custom Amazon EventBridge event bus. Six teams consume the events through their own rules and event patterns. When the bus was created… · Design for New Solutions
  6. A media company stores customer uploads in an Amazon S3 bucket in us-east-1. Customers in Europe report slow uploads and downloads. The company wants a single global endpoint… · Design for New Solutions
  7. An e-commerce site runs behind a public Application Load Balancer. During promotions it suffers HTTP flood attacks that exhaust the application tier, and Shield Standard does not… · Continuous Improvement
  8. A company's monthly AWS spend varies with seasonal traffic and steady growth. Last month a misconfigured job in one member account ran for several days and added an unexpected… · Continuous Improvement
  9. A company rehosted about 150 ASP.NET applications built on .NET Framework 4.x to Windows Server instances on Amazon EC2. The applications' source code is in Git repositories… · Migration and Modernization
  10. An insurer runs about 3.5 million lines of COBOL with CICS transactions, JCL batch jobs, Db2 and VSAM data on a mainframe. The hosting contract ends in 18 months. The few… · Migration and Modernization

Test 8

Take Test 8 ›
  1. A company gives application developers self-service access in 20 AWS accounts. Developers must be able to create IAM roles for their own Lambda functions and ECS tasks without… · Organizational Complexity
  2. A company has 80 AWS accounts in an AWS Organization, and application teams launch new public Application Load Balancers and new accounts every week. The security team must make… · Organizational Complexity
  3. A company runs six workloads in six separate standalone AWS accounts, each paid by a different department. Some accounts bought Savings Plans and Reserved Instances that they do… · Organizational Complexity
  4. A Java 21 function on AWS Lambda backs a customer-facing API. Traffic is spiky, and each cold start takes about 6 seconds because of framework initialization, which is too slow… · Design for New Solutions
  5. A bank runs an Amazon Aurora PostgreSQL global database with the primary cluster in us-east-1 and a secondary cluster in eu-west-1. A regulator requires the bank to operate the… · Design for New Solutions
  6. An IoT platform processes about 50,000 sensor messages per second. For each message, a workflow validates the payload, calls two Lambda functions and writes an item to DynamoDB… · Design for New Solutions
  7. A company runs about 200 AWS Lambda functions written in Python and Node.js on the x86_64 architecture. The functions are not memory-bound, and some use third-party libraries… · Continuous Improvement
  8. A payments company runs a production Amazon Aurora PostgreSQL cluster whose major engine version is nearing the end of standard support. The upgrade must be rehearsed on a… · Continuous Improvement
  9. A company plans to move a large Oracle database, with thousands of PL/SQL packages, to Amazon Aurora PostgreSQL. Before approving the project, management wants an estimate of how… · Migration and Modernization
  10. A company must leave its data center within six months. It runs about 400 virtual machines on VMware vSphere with NSX networking, and its operations team relies on vCenter… · Migration and Modernization

Test 9

Take Test 9 ›
  1. A company with 80 AWS accounts in an AWS Organization wants to move toward least privilege. Over the years, teams have created IAM roles, IAM users with access keys and broad… · Organizational Complexity
  2. AWS Config is enabled in all 50 accounts of an AWS Organization, in three Regions each. The compliance team wants a single, read-only view of the compliance status of Config… · Organizational Complexity
  3. A shared-services account owns the Route 53 private hosted zone internal.example.com. Fifteen workload VPCs, each in a different AWS account, must resolve the records in this… · Hybrid Networking
  4. A SaaS company gives each of its 300 business customers a separate, isolated PostgreSQL-compatible database for compliance reasons. Each tenant is busy for a few hours at… · Design for New Solutions
  5. A mobile app lets users upload photos of up to 20 MB. The company wants the photos to go directly to an Amazon S3 bucket so that no upload traffic passes through its application… · Design for New Solutions
  6. A gaming company stores player sessions and leaderboards in Redis sorted sets on a self-managed cluster, with a relational database kept in step for durability. The application… · Design for New Solutions
  7. A web service runs on Amazon ECS behind an Application Load Balancer. Rolling deployments sometimes send errors to users before the team notices a bad release. The team wants to… · Continuous Improvement
  8. A company's security policy says that no Amazon S3 bucket may allow public access. AWS Config already flags buckets that violate this policy with a managed rule, but engineers… · Continuous Improvement
  9. A company is moving a customer-facing web application from its data center to AWS. It wants to shift traffic in stages, for example 5 percent, then 25 percent, then 100 percent… · Migration and Modernization
  10. A company is moving 250 TB of data from a bucket in another cloud provider's object storage to Amazon S3 over a 10 Gbps internet connection. The data keeps changing until the… · Migration and Modernization

Test 10

Take Test 10 ›
  1. A nightly batch job runs in a shared-services account under a job role. The job assumes RoleB in a network account, and then uses RoleB's credentials to assume RoleC in a data… · Organizational Complexity
  2. A company gives each team a sandbox AWS account with a monthly budget. The platform team works from the organization's management account. Teams occasionally exceed the budget by… · Organizational Complexity
  3. A company runs about 200 VPCs across four AWS Regions, plus on-premises sites connected by VPN. It wants three isolated routing domains (production, development and shared… · Hybrid Networking
  4. A web application stores user sessions in Amazon DynamoDB. A session must stop being honored 30 minutes after the user's last activity, and expired sessions must be cleaned up… · Design for New Solutions
  5. A company is building a public API backed by AWS Lambda functions for a mobile app. Users sign in with an Amazon Cognito user pool, and the API must validate the resulting JSON… · Design for New Solutions
  6. A log-processing cluster reads and writes large sequential files. Each node needs a 12 TiB data volume that sustains about 400 MiB/s of throughput, and the data can be rebuilt… · Design for New Solutions
  7. Before a major launch, a company wants evidence that its Auto Scaling based web application keeps serving traffic when a share of its EC2 instances is suddenly terminated. The… · Continuous Improvement
  8. The web tier of an application runs in an EC2 Auto Scaling group. Load changes throughout the day in ways that the team cannot predict, and the team wants the group to keep… · Continuous Improvement
  9. A company runs an on-premises Hadoop cluster of 300 nodes whose HDFS storage keeps growing. Nightly Apache Spark and Hive jobs run for about six hours, and the cluster sits… · Migration and Modernization
  10. A company runs a packaged enterprise application on a self-managed Oracle database on-premises. The vendor supports the application only when the database host has a specific… · Migration and Modernization