A company has multiple AWS accounts and wants to centrally manage billing while retaining visibility into each account's usage. Which AWS feature should they use?
Aws Sap Organizational Complexity
Question · Easy
Which AWS service enables you to apply guardrails across multiple AWS accounts using Service Control Policies (SCPs)?
Introduction and SAP-C02 Exam Facts
Current SAP-C02 Exam Facts
Study guide
What is the primary purpose of AWS Control Tower?
Tech Exam Prep Podcast
Listen on Spotify
Podcast
Which AWS service provides a dedicated network connection from on-premises data centers to AWS?
A company needs to implement a multi-account strategy where development, staging, and production environments are completely isolated. Each environment should have its own VPC with overlapping IP address ranges. What is the MOST cost-effective solution?
Question · Medium
An enterprise has deployed AWS Control Tower and wants to prevent any account from disabling CloudTrail logging. Which mechanism should they use?
Exam Format, Scoring, and Retakes
A company with 500 AWS accounts needs to enforce that all EC2 instances are tagged with CostCenter and Environment tags. They want to prevent instance launch if these tags are missing. What is the MOST scalable solution?
A company needs to connect 50 VPCs across 10 AWS accounts to their on-premises data center. They require transitive routing between VPCs and on-premises, with centralized management. Which architecture meets these requirements with the LOWEST operational overhead?
A company wants to implement federated access to AWS using their existing Active Directory. They need to provide SSO access to multiple AWS accounts and enforce MFA. Which solution should they use?
An organization needs to ensure that production accounts cannot be accessed from IP addresses outside their corporate network. Development accounts should remain accessible from anywhere. How can this be implemented?
Candidate Profile and Four Exam Domains
A global enterprise with 200 AWS accounts needs to implement a security requirement that prevents any IAM user from having console access in production accounts, while allowing console access in development accounts. Root accounts must be able to access the console in all accounts. What is the MOST efficient implementation?
Question · Hard
A company has a complex hybrid network with multiple on-premises data centers, 100+ VPCs across 20 AWS accounts, and connectivity requirements to SaaS providers. They need transitive routing, centralized security inspection, and the ability to share VPN/Direct Connect connections. Which architecture meets these requirements?
An organization needs to implement a tagging strategy that ensures: 1) All resources are tagged with Owner and Project, 2) Cost allocation tags are automatically applied to all accounts, 3) Untagged resources are automatically remediated or deleted after 7 days, 4) The solution works across 500+ accounts with minimal operational overhead. Which combination of services should they use?
Which AWS service should be used to decouple application components and enable asynchronous processing of messages?
Aws Sap New Solutions
Multi-Account Governance
Multi-Account Strategy, Account Topologies, and OU Hierarchies
A company needs a managed service to run containers without managing servers or clusters. Which service should they use?
Which database service should be used for a global application requiring single-digit millisecond latency at any scale with automatic multi-region replication?
Which AWS service enables you to build serverless workflows to coordinate multiple Lambda functions and AWS services into business-critical applications?
A company is designing a microservices architecture with 50 services. They need service discovery, load balancing, and the ability to enforce mutual TLS authentication between services. Which solution meets these requirements with the LEAST operational overhead?
Service Control Policies, Inheritance, and Permission Guardrails
An application needs to process 100,000 events per second from IoT devices. Events must be processed in order for each device, with the ability to replay events for debugging. Which architecture is MOST appropriate?
A company is designing a serverless application that needs to process files uploaded to S3. Processing takes 10 minutes per file and requires 4GB of memory. Which solution is MOST cost-effective?
A financial services company needs to build a data lake that can store petabytes of structured and unstructured data. They need fine-grained access control at the column and row level, and the ability to query data using SQL. Which combination of services should they use?
An e-commerce application needs to handle flash sales with 100x normal traffic spikes. The application must remain available during spikes, and costs should be minimized during normal traffic. Which architecture meets these requirements?
Control Tower, Landing Zones, Central Logging, and Resource Sharing
A company wants to implement a CQRS (Command Query Responsibility Segregation) pattern. Write operations require strong consistency, while read operations need to handle millions of queries per second with eventual consistency. Which database architecture should they use?
A company is building an AI-powered recommendation system. They need to train custom models on their customer data and deploy real-time inference endpoints that scale automatically. Which AWS services should they use?
A global interactive application needs to support 1 million concurrent users with: sub-50ms session-state latency, real-time event fan-out, sticky regional affinity for active sessions, and graceful failover if a Region becomes unavailable. Which architecture is MOST suitable?
A financial trading platform needs to process market data feeds with microsecond latency requirements. The system must: process millions of messages per second, maintain strict ordering within symbol streams, provide disaster recovery with RPO < 1 second, and ensure compliance with data retention requirements. Which architecture meets ALL requirements?
Hybrid and Inter-VPC Connectivity
Transit Gateway, VPC Connectivity, and PrivateLink
A company is designing a SaaS multi-tenant application. Requirements include: tenant data isolation (some tenants require dedicated resources), tiered pricing (Bronze/Silver/Gold tiers with different SLAs), automatic tenant onboarding, and the ability to migrate tenants between tiers without downtime. Which architecture is MOST appropriate?
Which AWS service automatically analyzes your AWS resources and provides recommendations to help you follow AWS best practices?
Aws Sap Improve Existing
A company wants to implement Infrastructure as Code (IaC) to manage their AWS infrastructure. Which AWS service should they use?
Which AWS service provides a unified user interface to view operational data from multiple AWS services and enables you to automate operational tasks across AWS resources?
Direct Connect, VPN, and Hybrid Redundancy
A company has an RDS database that is experiencing read-heavy workload performance issues. Which is the MOST cost-effective solution to improve read performance?
An application deployed on EC2 is experiencing intermittent outages. The logs show out-of-memory errors during peak hours. Which combination of actions should be taken to improve reliability?
A company's S3 bucket accidentally had its permissions changed to public. They want to detect and automatically remediate such security configuration changes in the future. Which solution should they implement?
A company is spending more than expected on their EC2 instances. They have variable workloads with predictable daily patterns. Which combination of actions will MOST effectively reduce costs without impacting performance?
Hybrid DNS with Route 53 Resolver
An application is experiencing slow API response times. Analysis shows database queries are the bottleneck. The database is an RDS PostgreSQL instance. Which optimization should be implemented FIRST?
A company has a CloudFormation template that deploys their application infrastructure. They want to implement blue/green deployments to minimize downtime during updates. Which approach should they use?
A legacy application running on EC2 is experiencing scaling issues during peak hours. The application: cannot be modified (black box), requires sticky sessions, has variable CPU patterns, and stores session data locally on each instance. Which approach will improve scalability with minimal application changes?
A company has a three-tier web application with a database tier that has become a bottleneck. The database is MySQL on RDS. Analysis shows: 70% of queries are read operations, write operations are increasing and cannot be delayed, the working set is 100GB, peak connections exceed 5000, and some queries take 30+ seconds. Which comprehensive solution addresses ALL issues?
Loading more…