100% Free Amazon SAP-C02 Practice Test Questions

Question 1

A company is planning a migration from an on-premises data center to the AWS cloud. The company plans to use multiple AWS accounts that are managed in an organization in AWS organizations. The company will cost a small number of accounts initially and will add accounts as needed. A solution architect must design a solution that turns on AWS accounts. What is the MOST operationally efficient solution that meets these requirements

A : Create an AWS Lambda function that creates a new cloudTrail trail in all AWS account in the organization. Invoke the Lambda function dally by using a scheduled action in Amazon EventBridge.

B : Create a new CloudTrail trail in the organizations management account. Configure the trail to log all events for all AYYS accounts in the organization.

C : Create a new CloudTrail trail in all AWS accounts in the organization. Create new trails whenever a new account is created.

D : Create an AWS systems Manager Automaton runbook that creates a cloud trail in all AWS accounts in the organization. Invoke the automation by using Systems Manager State Manager.

Answer: B

Question 2

A leading fast-food chain has recently adopted a hybrid cloud infrastructure that extends its data centers into AWS Cloud. The solutions architect has been tasked to allow on-premises users, who are already signed in using their corporate accounts, to manage AWS resources without creating separate IAM users for each of them. This is to avoid having two separate login accounts and memorizing multiple credentials.

Which of the following is the best way to handle user authentication in this hybrid architecture?

A : Authenticate using your on-premises SAML 2.0-compliant identity provider (IDP), retrieve temporary credentials using STS, and grant federated access to the AWS console via the AWS single sign-on (SSO) endpoint using a browser.

B : Retrieve AWS temporary security credentials with Web Identity Federation using STS and AssumeRoleWithWebIdentity to enable users to log in to the AWS console.

C : Authenticate through your on-premises SAML 2.0-compliant identity provider (IDP) using STS and AssumeRoleWithWebIdentity to retrieve temporary security credentials, which enables your users to log in to the AWS console using a browser.

D : Integrate the company’s authentication process with Amazon AppFlow and allow Amazon STS to retrieve temporary AWS credentials using OAuth 2.0 to enable your members to log in to the AWS Console.

Answer: A

Question 3

A leading financial company runs its application in an Amazon ECS Cluster. The application processes a large stream of intraday data and stores the generated result in a DynamoDB table. To comply with the financial regulatory policy, the solutions architect was tasked to design a system that detects new entries in the DynamoDB table and then automatically run tests to verify the results using a Lambda function.

Which of the following options can satisfy the company’s requirement with minimal configuration changes?

A : Detect the new entries in the DynamoDB table using Systems Manager Automation then automatically invoke the Lambda function for processing

B : Set up a DynamoDB stream to detect the new entries and automatically trigger the Lambda function.

C : Migrate the table to Amazon DocumentDB to take advantage of its integration with Amazon EventBridge which can invoke a Lambda function for specific database events.

D : Run an AWS Lambda function using Amazon SNS as a trigger each time the ECS Cluster successfully processes financial data.

Answer: B

Question 4

A company has built a high performance computing (HPC) cluster in AWS for a tightly coupled workload that

generates a large number of shared files stored in Amazon EFS. The cluster was performing well when the

number of Amazon EC2 instances in the cluster was 100. However, when the company increased the cluster

size to 1,000 EC2 instances, overall performance was well below expectations

Which collection of design choices should a solutions architect make to achieve the maximum performance

from the HPC cluster? (Select THREE.)

A : Ensure the HPC cluster is launched within a single Availability Zone.

B : Launch the EC2 instances and attach elastic network interfaces in multiples of four.

C : Select EC2 instance types with an Elastic Fabric Adapter (EFA) enabled

D : Ensure the cluster is launched across multiple Availability Zones.

E : Replace Amazon EFS with multiple Amazon EBS volumes in a RAID array.

F : Replace Amazon EFS with Amazon FSx for Lustre.

Answer: A,C

Question 5

A solutions architect must provide a secure way for a team of cloud engineers to use the AWS CLI to upload objects into an Amazon S3 bucket Each cloud engineer has an IAM user. IAM access keys and a virtual multi-factor authentication (MFA) device The IAM users for the cloud engineers are in a group that is named S3-access The cloud engineers must use MFA to perform any actions in Amazon S3

Which solution will meet these requirements?

A : Attach a policy to the S3 bucket to prompt the 1AM user for an MFA code when the 1AM user performs actions on the S3 bucket Use 1AM access keys with the AWS CLI tocall Amazon S3

B : Update the trust policy for the S3-access group to require principals to use MFA when principals assume the group Use 1AM access keys with the AWS CLI to call Amazon S3

C : Attach a policy to the S3-access group to deny all S3 actions unless MFA is present Use 1AM access keys with the AWS CLI to call Amazon S3

D : Attach a policy to the S3-access group to deny all S3 actions unless MFA is present Request temporary credentials from AWS Security Token Service (AWS STS) Attach the temporary credentials in a profile that Amazon S3 will reference when the user performs actions in Amazon S3

Answer: D

Free Practice Amazon SAP-C02 Exam Questions 2025