Free SAP-C02 mock test – Exam 2

AWS Certified Solutions Architect – Professional (SAP-C02)

Free SAP-C02 practice exam for AWS Solutions Architect Professional preparation.

Use this free AWS Certified Solutions Architect Professional practice exam to review multi-account governance, networking, migration, resiliency, serverless, containers, security, cost optimization, and operational excellence.

10 exam-style questions Free SAP-C02 mock test Detailed option explanations No signup required

Start Practice Exam 2 below. Answer each question first, then use the explanations to review why each option is correct or incorrect.

AWS Certified Solutions Architect - Professional (SAP-C02) Practice Exam 2

Free AWS Certified Solutions Architect Professional SAP-C02 practice exam 2 with detailed explanations for every option.

1 / 10

Question

A data-processing application runs containers on EC2 instances. The application polls EFS for new files, selects a container image, and runs processing that can last up to 2 hours. The company wants to eliminate the EC2 instances that run the containers. Which solution should be used?

Which option meets the requirement?

A. Run the processing as ECS Fargate tasks, move uploads to S3, use S3 event notifications to invoke Lambda selection logic, and have Lambda start the correct Fargate task.

B. Convert every processor to a Lambda container image and run each function for up to 2 hours.

C. Use an EventBridge rule that listens directly for EFS file creation events and starts Fargate tasks.

D. Continue using EC2 for the processing containers but move the selection logic to Lambda.

2 / 10

Question

A company uses a 1 Gbps AWS Direct Connect connection with a Direct Connect gateway and transit gateway. The company must connect on-premises networks to VPC resources over a transit VIF. Which TWO routing steps are required?

Which option meets the requirement?

A. Advertise on-premises network prefixes over the transit VIF.

B. Advertise VPC prefixes from the Direct Connect gateway toward the on-premises network over the transit VIF.

C. Upgrade the Direct Connect connection to 10 Gbps before using a transit VIF.

D. Enable MACsec encryption before any transit VIF routes can be exchanged.

E. Create a public VIF for VPC private subnet routes.

3 / 10

Question

A company needs one patch compliance report for both on-premises servers and EC2 instances. The servers currently use different patching tools. Which service should a solutions architect recommend?

Which option meets the requirement?

A. Use AWS Systems Manager Patch Manager and Systems Manager compliance reports for both hybrid managed nodes and EC2 instances.

B. Use AWS OpsWorks and Amazon QuickSight to generate patch compliance reports.

C. Use Amazon Inspector only to patch all servers and generate patch reports.

D. Use AWS X-Ray to send patch status to Systems Manager OpsCenter.

4 / 10

Question

A company creates a new AWS account for every project. Today, the root user signs in and manually requests EC2 service quota increases. A solutions architect needs the least-operational-overhead automation. What should be configured?

Which option meets the requirement?

A. Create a Service Quotas request template in the AWS Organizations management account with the desired EC2 quota increases.

B. Create an EventBridge rule and Lambda function that opens a support case for every new account.

C. Create an AWS Config rule that sets EC2 quotas in new accounts.

D. Require every project owner to request quota increases after first sign-in.

5 / 10

Question

A photo-processing application stores upload state in DynamoDB and invokes Lambda when users upload photos to S3. During spikes, Lambda concurrency is exhausted and some DynamoDB writes fail. Which TWO changes improve performance and reliability?

Which option meets the requirement?

A. Evaluate and increase DynamoDB write capacity or use on-demand capacity.

B. Evaluate and increase DynamoDB read capacity only.

C. Add SQS between S3 event notifications and Lambda, with reprocessing or dead-letter handling.

D. Add ElastiCache in front of Lambda functions to increase concurrency.

E. Use S3 Transfer Acceleration to fix Lambda processing concurrency.

6 / 10

Question

A Lambda function in a VPC reads from an Aurora database, writes aggregated data to an S3 bucket encrypted with SSE-KMS, and currently stores database credentials in environment variables. Data must not travel across the internet, and compromised database credentials should have minimal impact. What should be recommended?

Which option meets the requirement?

A. Enable IAM database authentication for Aurora, allow the Lambda role to authenticate to the database, and deploy an S3 gateway VPC endpoint.

B. Keep password authentication and require HTTPS to S3 only.

C. Store the database password in plain Systems Manager Parameter Store and deploy no VPC endpoints.

D. Store the password in S3 and rotate it with S3 Lifecycle rules.

7 / 10

Question

A company deploys an application to an EC2 Auto Scaling group through CodePipeline. Infrastructure is defined in CloudFormation. Recent template changes caused downtime. Which pipeline improvements reduce the risk of downtime and provide rollback options?

Which option meets the requirement?

A. Use CodeBuild automated tests in a test environment, CloudFormation change sets before deployment, and CodeDeploy blue/green deployments.

B. Only validate templates with the AWS CLI and deploy directly to production.

C. Ask operators to manually test running production instances after each deployment.

D. Use user data scripts only and remove CloudFormation from the pipeline.

8 / 10

Question

A security team wants notification when an S3 bucket policy allows public access. Which solution should be used?

Which option meets the requirement?

A. Create an IAM Access Analyzer analyzer and an EventBridge rule for Access Analyzer findings where isPublic is true, targeting an SNS topic.

B. Configure S3 event notifications for an isPublic event on every bucket.

C. Create an EventBridge rule only for PutBucketPolicy API calls and assume every change is public.

D. Use the AWS Config cloudtrail-s3-dataevents-enabled rule to detect public bucket policies.

9 / 10

Question

A media application runs in one AWS Region. It stores static assets in S3 and needs resiliency across multiple Regions. A second S3 bucket already exists in another Region. Which solution improves static asset resiliency with the least application impact?

Which option meets the requirement?

A. Configure S3 Cross-Region Replication between the buckets and serve assets through CloudFront with origin failover.

B. Manually copy objects to the second bucket once per month.

C. Use EBS snapshots to replicate the S3 bucket.

D. Move static assets into an RDS Multi-AZ database.

10 / 10

Question

A web application uses API Gateway, Lambda, and DynamoDB global tables in two Regions in an active-passive design. Manual DNS failover is currently required. A separate analytics Lambda workload has caused account concurrency to reach high utilization and throttle user-facing functions. Which solution improves reliability with the least operational overhead?

Which option meets the requirement?

A. Set reserved concurrency for the web application Lambda functions, configure Route 53 health checks and failover records, and create a CloudWatch alarm for account-level Lambda concurrency utilization.

B. Use geolocation routing and remove all Lambda concurrency controls.

C. Set reserved concurrency only on the analytics function to the full account quota.

D. Keep manual DNS failover and add provisioned concurrency to every Lambda function in the account.

Your score is

The average score is 0%

What Practice Exam 2 covers

Serverless refactoring, ECS Fargate, S3 events, and long-running containers
Direct Connect transit VIF routing and hybrid connectivity
Systems Manager Patch Manager and multi-environment operations
Service Quotas automation, Lambda concurrency, and DynamoDB reliability
IAM database authentication, VPC endpoints, CI/CD safeguards, and Access Analyzer

Who should take this free mock test

Use this SAP-C02 practice exam if you are preparing for AWS Certified Solutions Architect – Professional and want focused, free practice with detailed explanations.

Browse AWS practice exams Study AWS articles

FAQ

Is this SAP-C02 practice exam free?

Yes. This AWS Certified Solutions Architect Professional mock test is free to open and retake.

Does this replace hands-on AWS practice?

No. Use it with hands-on labs for Organizations, IAM, VPC networking, Route 53, ECS, Lambda, DynamoDB, S3, CloudFront, Systems Manager, and migration services.

How should I review missed questions?

Read every option explanation, identify the AWS architecture pattern, and review the relevant service documentation before retaking the free practice exam.

Free AWS Solutions Architect Professional Practice Exam 2 | SAP-C02 Mock Test

Free SAP-C02 practice exam for AWS Solutions Architect Professional preparation.

Question

Correct Answer: A

Explanation

Question

Correct Answer: A, B

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A, C

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

What Practice Exam 2 covers

Who should take this free mock test

FAQ

Is this SAP-C02 practice exam free?

Does this replace hands-on AWS practice?

How should I review missed questions?

Leave a Reply Cancel reply