Free AWS Certified Solutions Architect - Professional SAP-C02: AWS Certified Solutions Architect -Professional SAP-C02 Exam Questions and Answers

Last updated: September 16, 2026

Exam code

SAP-C02

Provider

Amazon

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   - (Exam Topic 1) A startup company recently migrated a large ecommerce website to AWS. The website has experienced a 70% increase in sales. Software engineers are using a private GitHub repository to manage code. The DevOps learn is using Jenkins for builds and unit testing. The engineers need to receive notifications for bad builds and zero downtime during deployments. The engineers also need to ensure any changes to production are seamless for users and can be rolled back in the event of a major issue. The software engineers have decided to use AWS CodePipeline to manage their build and deployment process. Which solution will meet these requirements?

   • A. Use GitHub websockets to trigger the CodePipeline pipelin
   • B. Use the Jenkins plugin for AWS CodeBuild to conduct unit testin
   • C. Send alerts to an Amazon SNS topic for any bad build
   • D. Deploy in an in-plac
   Reveal Answer

2. Question #2

   - (Exam Topic 1) A company wants to change its internal cloud billing strategy for each of its business units. Currently, the cloud governance team shares reports for overall cloud spending with the head of each business unit. The company uses AWS Organizations lo manage the separate AWS accounts for each business unit. The existing tagging standard in Organizations includes the application, environment, and owner. The cloud governance team wants a centralized solution so each business unit receives monthly reports on its cloud spending. The solution should also send notifications for any cloud spending that exceeds a set threshold. Which solution is the MOST cost-effective way to meet these requirements?

   • A. Configure AWS Budgets in each account and configure budget alerts that are grouped by application, environment, and owne
   • B. Add each business unit to an Amazon SNS topic for each aler
   • C. Use Cost Explorer in each account to create monthly reports for each business unit.
   • D. Configure AWS Budgets in the organization's master account and configure budget alerts that are grouped by application, environment, and owne
   Reveal Answer

3. Question #3

   - (Exam Topic 1) A company wants to host a new global website that consists of static content. A solutions architect is working on a solution that uses Amazon CloudFront with an origin access identity <OAI) to access website content that is stored in a private Amazon S3 bucket. During testing, the solutions architect receives 404 errors from the S3 bucket. Error messages appear only for attempts to access paths that end with a forward slash. such as example.com/path/. These requests should return the existing S3 object path/index.html. Any potential solution must not prevent CloudFront from caching the content. What should the solutions architect do to resolve this problem?

   • A. Change the CloudFront origin to an Amazon API Gateway proxy endpoin
   • B. Rewrite the S3 request URL by using an AWS Lambda function.
   • C. Change the CloudFront origin to an Amazon API Gateway endpoin
   • D. Rewrite the S3 request URL in an AWS service integration.
   Reveal Answer

4. Question #4

   - (Exam Topic 1) A company has many services running in its on-premises data center. The data center is connected to AWS using AWS Direct Connect (DX) and an IPSec VPN. The service data is sensitive and connectivity cannot traverse the internet. The company wants to expand into a new market segment and begin offering its services to other companies that are using AWS. Which solution will meet these requirements?

   • A. Create a VPC Endpoint Service that accepts TCP traffic, host it behind a Network Load Balancer, and make the service available over DX.
   • B. Create a VPC Endpoint Service that accepts HTTP or HTTPS traffic, host it behind an Application Load Balancer, and make the service available over DX.
   • C. Attach an internet gateway to the VP
   • D. and ensure that network access control and security group rules allow the relevant inbound and outbound traffic.
   Reveal Answer

5. Question #5

   - (Exam Topic 1) A company stores sales transaction data in Amazon DynamoDB tables. To detect anomalous behaviors and respond quickly, all changes lo the items stored in the DynamoDB tables must be logged within 30 minutes. Which solution meets the requirements?

   • A. Copy the DynamoDB tables into Apache Hive tables on Amazon EMR every hour and analyze them (or anomalous behavior
   • B. Send Amazon SNS notifications when anomalous behaviors are detected.
   • C. Use AWS CloudTrail to capture all the APIs that change the DynamoDB table
   • D. Send SNS notifications when anomalous behaviors are detected using CloudTrail event filtering.
   Reveal Answer

6. Question #6

   - (Exam Topic 1) A company is creating a REST API to share information with six of its partners based in the United States. The company has created an Amazon API Gateway Regional endpoint. Each of the six partners will access the API once per day to post daily sales figures. After initial deployment, the company observes 1.000 requests per second originating from 500 different IP addresses around the world. The company believes this traffic is originating from a botnet and wants to secure its API while minimizing cost. Which approach should the company take to secure its API?

   • A. Create an Amazon CloudFront distribution with the API as the origi
   • B. Create an AWS WAF web ACL with a rule to block clients "hat submit more than five requests per da
   • C. Associate the web ACL with the CloudFront distributio
   • D. Configure CloudFront with an origin access identity (OAI) and associate it with the distributio
   Reveal Answer

7. Question #7

   - (Exam Topic 1) A company is hosting a single-page web application in the AWS Cloud. The company is using Amazon CloudFront to reach its goal audience. The CloudFront distribution has an Amazon S3 bucket that is configured as its origin. The static files for the web application are stored in this S3 bucket. The company has used a simple routing policy to configure an Amazon Route 53 A record The record points to the CloudFront distribution The company wants to use a canary deployment release strategy for new versions of the application. What should a solutions architect recommend to meet these requirements?

   • A. Create a second CloudFront distribution for the new version of the applicatio
   • B. Update the Route 53 record to use a weighted routing policy.
   • C. Create a Lambda@Edge functio
   • D. Configure the function to implement a weighting algorithm and rewrite the URL to direct users to a new version of the application.
   Reveal Answer

8. Question #8

   - (Exam Topic 2) A development team s Deploying new APIs as serverless applications within a company. The team is currently using the AWS Maragement Console to provision Amazon API Gateway. AWS Lambda, and Amazon DynamoDB resources A solutions architect has been tasked with automating the future deployments of these serveriess APIs How can this be accomplished?

   • A. Use AWS CloudFonTiation with a Lambda-backed custom resource to provision API Gateway Use the MfS: :OynMoDB::Table and AWS::Lambda::Function
   • B. Use the AWS Serverless Application Model to define the resources Upload a YAML template and application files to the code repository Use AWS CodePipeline
   • C. Use the AWS CloudFormabon deployment provider m CodePipeline to deploy the solution.
   • D. Use AWS CloudFormation to define the serverless applicatio
   Reveal Answer

9. Question #9

   - (Exam Topic 2) A company is migrating its infrastructure to the AW5 Cloud. The company must comply with a variety of regulatory standards for different projects. The company needs a multi-account environment. A solutions architect needs to prepare the baseline infrastructure The solution must provide a consistent baseline of management and security but it must allow flexibility for different compliance requirements within various AWS accounts. The solution also needs to integrate with the existing on-premises Active Directory Federation Services (AD FS) server. Which solution meets these requirements with the LEAST amount of operational overhead?

   • A. Create an organization In AWS Organizations Create a single SCP for least privilege access across all accounts Create a single OU for all accounts Configure
   • B. Enable AWS Config in the central account with conformance packs for all accounts.
   • C. Create an organization In AWS Organizations Enable AWS Control Tower on the organizatio
   • D. Review included guardrails for SCP
   Reveal Answer

10. Question #10

    - (Exam Topic 2) A financial services company loaded millions of historical stock trades into an Amazon DynamoDB table The table uses on-demand capacity mode Once each day at midnight, a few million new records are loaded into the table Application read activity against the table happens in bursts throughout the day, and a limited set of keys are repeatedly looked up. The company needs to reduce costs associated with DynamoDB. Which strategy should a solutions architect recommend to meet this requirement?

    • A. Deploy an Amazon ElastiCache cluster in front of the DynamoDB table.
    • B. Deploy DynamoDB Accelerator (DAX) Configure DynamoDB auto scaling Purchase Savings Plans in Cost Explorer
    • C. Use provisioned capacity mode Purchase Savings Plans in Cost Explorer
    • D. Deploy DynamoDB Accelerator (DAX) Use provisioned capacity mode Configure DynamoDB auto scaling
    Reveal Answer