A company runs a global web application on EC2 instances in a private subnet in us-west-2. The application is accessed by users worldwide. The company wants to improve performance for users by reducing latency and wants to provide a stable IP address for the application. Which solution should they implement?

Create an Amazon CloudFront distribution with the Application Load Balancer as the origin.

Create an Application Load Balancer in front of the EC2 instances and use Amazon Route 53 with a latency-based routing policy.

Create an AWS Global Accelerator accelerator with an endpoint group pointing to the Application Load Balancer in us-west-2.

Assign an Elastic IP address to the EC2 instances and use Amazon Route 53 with a geolocation routing policy.

A solutions architect is designing a multi-account network architecture. The company wants to centralize internet egress and security inspection for all VPCs. Which approach is most suitable for this requirement?

Attach an internet gateway to each VPC

Use a centralized VPC with a transit gateway and route all traffic through it

Create VPC peering connections between every VPC

Use AWS PrivateLink to connect all VPCs to a shared service

AWSCertified Solutions Architect - Professional

Domain 1Objective 1

Task 1.1: Architect Network Connectivity Strategies. SAP-C02 Practice Questions (Page 5)

Part of the Content Domain 1: Design Solutions for Organizational Complexity domain, which makes up ~25% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 4–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

12concepts

12 Concepts in This Objective

Network Architecture for Organizational Complexity
AWS Global Infrastructure and Connectivity
Virtual Private Cloud (VPC) Design
Multi-Account Network Architecture
Hybrid Connectivity Options
Transit Gateway Architecture
VPC Peering and Inter-Region Connectivity
DNS and Routing Strategies
Network Security and Compliance
Network Performance Optimization
Cost Optimization for Network Connectivity
Monitoring and Troubleshooting Network Connectivity

Questions 21–25

21application · medium
A company runs a global web application on EC2 instances in a private subnet in us-west-2. The application is accessed by users worldwide. The company wants to improve performance for users by reducing latency and wants to provide a stable IP address for the application. Which solution should they implement?
Select an answer first
22foundation · easy
A solutions architect is designing a multi-account network architecture. The company wants to centralize internet egress and security inspection for all VPCs. Which approach is most suitable for this requirement?
Select an answer first
23foundation · easy
A company wants to deploy a web application in AWS with high availability across multiple isolated locations within a single Region. Which AWS global infrastructure component should the architect use to achieve this?
Select an answer first
24foundation · easy
A company wants to connect its on-premises data center to AWS with a private, dedicated connection. Which option is designed to provide a consistent network experience but typically involves higher costs?
Select an answer first
25foundation · easy
A company wants to establish a secure connection from its on-premises network to its VPC over the public internet. Which AWS service is the most appropriate for this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 1.1: Architect Network Connectivity Strategies. SAP-C02 Practice Questions (Page 5)

Questions 21–25

A solutions architect is designing a multi-account network architecture. The company wants to centralize internet egress and security inspection for all VPCs. Which approach is most suitable for this requirement?

A company wants to deploy a web application in AWS with high availability across multiple isolated locations within a single Region. Which AWS global infrastructure component should the architect use to achieve this?

A company wants to connect its on-premises data center to AWS with a private, dedicated connection. Which option is designed to provide a consistent network experience but typically involves higher costs?

A company wants to establish a secure connection from its on-premises network to its VPC over the public internet. Which AWS service is the most appropriate for this requirement?

Keep studying — Content Domain 1: Design Solutions for Organizational Complexity