🎯 Free SAP-C02 Mock Exam

SAP-C02 Mock Exam Questions (Page 1 of 3)

Preview the questions first, then start in timed or study mode.

1. Question #1Domain 1

   A large enterprise with 200 AWS accounts wants to ensure that no account can disable AWS CloudTrail or modify VPC Flow Logs. Which mechanism enforces these controls at the organizational level?

   AAWS Config conformance packs deployed to all accounts

   BIAM permission boundaries on all IAM roles

   CAWS Organizations Service Control Policies (SCPs)

   DAWS Security Hub automated standards
2. Question #2Domain 1

   A multinational company operates multiple AWS accounts and wants to share a common networking VPC across accounts without complex VPC peering. Which AWS service provides centralized network sharing?

   AAWS Transit Gateway

   BAWS Resource Access Manager (RAM) with shared VPCs

   CVPC peering mesh

   DAWS PrivateLink
3. Question #3Domain 1

   A global company requires all new AWS accounts provisioned for development teams to automatically have AWS Config, CloudTrail, and security baselines configured. Which AWS service automates this with guardrails?

   AAWS Service Catalog

   BAWS Control Tower

   CAWS Organizations alone

   DAWS CloudFormation StackSets triggered manually
4. Question #4Domain 1

   A company has a hybrid cloud setup with on-premises data centers and multiple AWS accounts. They want centralized, consistent DNS resolution across all environments. Which solution provides this?

   AAmazon Route 53 Resolver with forwarding rules

   BMultiple hosted zones with manual sync

   CAWS Direct Connect with BIND DNS server

   DVPN with custom DNS settings per VPC
5. Question #5Domain 1

   A financial services company uses AWS Organizations with multiple OUs. Developers must be prevented from launching large, expensive instance types in dev accounts. How should this be enforced?

   AIAM policies on individual developer users in each account

   BSCPs at the OU level denying launch of specific instance types

   CAWS Config rules with auto-remediation in each account

   DAWS Budgets alerts per developer
6. Question #6Domain 1

   A company uses AWS Organizations and wants to standardize the 'CostCenter' and 'Project' tags across all member accounts. Which AWS Organizations feature enforces tag standardization?

   AService Control Policies (SCPs)

   BAWS Config managed rules

   CAWS Organizations Tag Policies

   DAWS Budgets
7. Question #7Domain 2

   A gaming company needs a global multiplayer platform with single-digit millisecond latency for players worldwide with active-active data availability in all regions simultaneously. Which AWS solution achieves this?

   AAmazon DynamoDB Global Tables with multi-region active-active replication

   BAmazon RDS Multi-AZ with read replicas in each region

   CAmazon ElastiCache Global Datastore

   DAmazon Aurora Global Database with writer in one region
8. Question #8Domain 2

   An e-commerce company processes 100,000 orders per day through a monolithic application. During peak seasons, order processing becomes a bottleneck. Which architecture decouples order intake from processing?

   AIncrease EC2 instance type for the monolith

   BSplit the monolith into microservices using ECS

   CPlace an SQS queue between the API layer and order processors for independent scaling

   DAdd an RDS read replica to offload query load
9. Question #9Domain 2

   A company needs a DR strategy where their critical application can be restored in under 15 minutes with an RPO of 1 hour while minimizing cost when the DR environment is idle. Which strategy fits?

   ABackup and Restore

   BPilot Light

   CWarm Standby

   DMulti-site Active-Active
10. Question #10Domain 2

    A financial trading platform requires 99.999% availability. The application must continue to serve requests even if an entire AWS region becomes unavailable. Which architecture achieves this?

    AMulti-AZ deployment within a single region

    BActive-passive with Route 53 health checks across two regions

    CActive-active multi-region deployment with Route 53 latency-based routing

    DSingle-region with multiple load balancers