Online Access Free Amazon.SAP-C02.v2026-05-26.q273 Practice Test (Page 9)

SAP-C02 Exam Question 36

A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year.
Which solution will meet these requirements with the LEAST operational overhead?

A.Migrate the database to Amazon Neptune by using the AWS Schema Conversion Tool {AWS SCT).Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.

B.Migrate the database to Amazon RDS for Oracle. Store the password in AWS Secrets Manager. Turn on automatic rotation. Configure a yearly rotation schedule.

C.Migrate the database to an Amazon EC2 instance. Use AWS Systems Manager Parameter Store to keep and rotate the connection string by using an AWS Lambda function on a yearly schedule

D.Convert the database to Amazon DynamoDB by using the AWS Schema Conversion Tool (AWS SCT).
Store the password in AWS Systems Manager Parameter Store. Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.

SAP-C02 Exam Question 37

A company is building an application on AWS. The application sends logs to an Amazon Elasticsearch Service (Amazon ES) cluster for analysis. All data must be stored within a VPC.
Some of the company's developers work from home. Other developers work from three different company office locations. The developers need to access Amazon ES to analyze and visualize logs directly from their local development machines.
Which solution will meet these requirements?

A.Configure and set up an AWS Client VPN endpoint. Associate the Client VPN endpoint with a subnet in the VPC. Configure a Client VPN self-service portal. Instruct the developers to connect by using the client for Client VPN.

B.Create a transit gateway, and connect it to the VPC. Create an AWS Site-to-Site VPN. Create an attachment to the transit gateway. Instruct the developers to connect by using an OpenVPN client.

C.Create a transit gateway, and connect it to the VPC. Order an AWS Direct Connect connection. Set up a public VIF on the Direct Connect connection. Associate the public VIF with the transit gateway.
Instruct the developers to connect to the Direct Connect connection

D.Create and configure a bastion host in a public subnet of the VPC. Configure the bastion host security group to allow SSH access from the company CIDR ranges. Instruct the developers to connect by using SSH.

SAP-C02 Exam Question 38

A company is designing an AWS Organizations structure. The company wants to standardize a process to apply tags across the entire organization. The company will require tags with specific values when a user creates a new resource. Each of the company's OUs will have unique tag values.
Which solution will meet these requirements?

A.Use an SCP to deny the creation of resources that do not have the required tags. Create a tag policy that Includes the tag values that the company has assigned to each OU. Attach the tag policies to the OUs.

B.Use an SCP to deny the creation of resources that do not have the required tags. Create a tag policy that includes the tag values that the company has assigned to each OU. Attach the tag policies to the organization's management account.

C.Use an SCP to allow the creation of resources only when the resources have the required tags. Create a tag policy that includes the tag values that the company has assigned to each OU. Attach the tag policies to the OUs.

D.Use an SCP to deny the creation of resources that do not have the required tags. Define the list of tags. Attach the SCP to the OUs

SAP-C02 Exam Question 39

A company is developing a new on-demand video application that is based on microservices. The application will have 5 million users at launch and will have 30 million users after 6 months. The company has deployed the application on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate. The company developed the application by using ECS services that use the HTTPS protocol.
A solutions architect needs to implement updates to the application by using blue/green deployments. The solution must distribute traffic to each ECS service through a load balancer. The application must automatically adjust the number of tasks in response to an Amazon CloudWatch alarm.
Which solution will meet these requirements?

A.Configure the ECS services to use the blue/green deployment type and a Network Load Balancer.
Request increases to the service quota for tasks per service to meet the demand.

B.Configure the ECS services to use the blue/green deployment type and a Network Load Balancer.
Implement an Auto Scaling group for each ECS service by using the Cluster Autoscaler.

C.Configure the ECS services to use the blue/green deployment type and an Application Load Balancer.
Implement an Auto Seating group for each ECS service by using the Cluster Autoscaler.

D.Configure the ECS services to use the blue/green deployment type and an Application Load Balancer.Implement Service Auto Scaling for each ECS service.

SAP-C02 Exam Question 40

A solutions architect is creating an AWS CloudFormation template from an existing manually created non- production AWS environment The CloudFormation template can be destroyed and recreated as needed The environment contains an Amazon EC2 instance The EC2 instance has an instance profile that the EC2 instance uses to assume a role in a parent account The solutions architect recreates the role in a CloudFormation template and uses the same role name When the CloudFormation template is launched in the child account, the EC2 instance can no longer assume the role in the parent account because of insufficient permissions What should the solutions architect do to resolve this issue?

A.In the parent account edit the trust policy for the role that the EC2 instance needs to assume Ensure that the target role ARN in the existing statement that allows the sts AssumeRole action is correct Save the trust policy

B.In the parent account edit the trust policy for the role that the EC2 instance needs to assume Add a statement that allows the sts AssumeRole action for the root principal of the child account Save the trust policy

C.Update the CloudFormation stack again Specify only the CAPABILITY_NAMED_IAM capability

D.Update the CloudFormation stack again Specify the CAPABIUTYJAM capability and the CAPABILITY_NAMEDJAM capability

Other Version: 382Amazon.SAP-C02.v2026-05-12.q316; 670Amazon.SAP-C02.v2026-04-06.q271; 722Amazon.SAP-C02.v2026-03-31.q262; 2196Amazon.SAP-C02.v2025-09-26.q250; 6868Amazon.SAP-C02.v2025-06-02.q210; 1760Amazon.SAP-C02.v2024-09-24.q208; 1966Amazon.SAP-C02.v2024-06-22.q419; 1985Amazon.SAP-C02.v2024-04-22.q355; 1057Amazon.SAP-C02.v2023-12-22.q145; 1375Amazon.SAP-C02.v2023-12-15.q186; 1148Amazon.SAP-C02.v2023-11-20.q171; 1199Amazon.SAP-C02.v2023-11-10.q169; 914Amazon.SAP-C02.v2023-09-29.q103; 1818Amazon.SAP-C02.v2023-07-24.q211; 1045Amazon.SAP-C02.v2023-07-21.q91; 1737Amazon.SAP-C02.v2023-05-20.q185; 1845Amazon.SAP-C02.v2023-05-04.q198; 1646Amazon.SAP-C02.v2023-04-29.q159; 1760Amazon.SAP-C02.v2023-04-17.q149; 1572Amazon.SAP-C02.v2023-04-10.q185; 1678Amazon.SAP-C02.v2023-04-10.q164

Latest Upload: 135Oracle.1D0-1057-25-D.v2026-06-03.q29; 268NAHQ.CPHQ.v2026-06-03.q396; 252CompTIA.220-1201.v2026-06-03.q196; 152GIAC.GCFE.v2026-06-03.q78; 145HIMSS.CPHIMS.v2026-06-03.q45; 229Google.Professional-Cloud-Architect.v2026-06-03.q165; 143HP.HPE7-A09.v2026-06-02.q48; 152ACDIS.CCDS-O.v2026-06-02.q56; 132Microsoft.AB-730.v2026-06-02.q31; 208ASQ.CSSBB.v2026-06-02.q130

SAP-C02 Exam Question 36

SAP-C02 Exam Question 37

SAP-C02 Exam Question 38

SAP-C02 Exam Question 39

SAP-C02 Exam Question 40

Download PDF File