SAP-C02 AWS Certified Solutions Architect – Professional Free Practice Questions and Answers

A stateful web application is moving from on premises to AWS. It uses Aurora PostgreSQL and EC2 Auto Scaling, and users must retain session affinity while the application tier scales. Which design is appropriate?

• A. Aurora Replicas for read scaling and an Application Load Balancer with sticky sessions
• B. A Network Load Balancer without session persistence and one fixed database instance
• C. Aurora writer auto scaling with a round-robin DNS record only
• D. One EC2 instance for both application and database tiers

A company has a warm standby Region with an RDS read replica and an Auto Scaling group set to zero capacity. It needs automated failover within minutes without paying for active-active compute. What should it configure?

• A. A Route 53 failover record with health checking and automation to promote the replica and scale the standby group
• B. Weighted routing that always sends half of traffic to both Regions
• C. A monthly manual snapshot with no DNS changes
• D. A CloudFront cache invalidation rule

A central networking account must own and manage a VPC, while application accounts can launch resources into selected subnets but cannot manage the network. Which AWS capability should the architect use?

• A. Share selected subnets through AWS RAM after enabling organization sharing
• B. Peer separately created VPCs with matching CIDR blocks
• C. Create a public subnet in every application account
• D. Share the VPC route table by exporting it to S3

A company needs a second Direct Connect connection in one Region and plans to extend private connectivity to other Regions through the same pair. What architecture supports this?

• A. Attach private virtual interfaces from both connections to a Direct Connect gateway
• B. Create public virtual interfaces and route them to a single VPC
• C. Use a NAT gateway as the Direct Connect failover target
• D. Keep the single connection and add a second VPC endpoint

An organization permits purchases only from an approved third-party software catalog. Only a designated procurement role may administer Private Marketplace. Which design provides centralized enforcement?

• A. Use the Private Marketplace admin role and organization-level SCPs to restrict administration and role creation
• B. Give every developer AdministratorAccess and rely on training
• C. Create a different public marketplace for each OU
• D. Use an S3 bucket policy to restrict marketplace purchases