A company has multiple VPCs across several AWS accounts. They need to enable communication between all VPCs, but they also need to enforce network segmentation so that only specific VPCs can communicate with each other. The network team wants to avoid managing a complex mesh of VPC peering connections. Which solution should the company use?

Use AWS PrivateLink to connect all VPCs to a central service.

Use AWS Transit Gateway with route tables to control which VPCs can communicate.

Create a single VPC and use subnets to segment the network.

Create VPC peering connections between all VPCs that need to communicate.

What is the primary purpose of a trust policy in a cross-account IAM role?

To define which principals in other accounts are allowed to assume the role

To define the permissions the role grants to the assuming principal

To configure the role's session duration

A company is consolidating multiple AWS accounts into a single organization. They have identified that some accounts have overlapping workloads and want to consolidate them. The company wants to minimize downtime and avoid data loss during the migration. Which approach should the company use?

Use AWS Database Migration Service (DMS) to migrate the databases and manually recreate the application servers.

Use AWS CloudFormation StackSets to redeploy the workloads in the target accounts.

Use AWS Resource Access Manager (RAM) to share the resources from the source accounts with the target accounts.

Use AWS Application Migration Service (MGN) to migrate the workloads from the source accounts to the target accounts.

AWSCertified Solutions Architect - Professional

Domain 1Objective 4

Task 1.4: Design a Multi-Account AWS Environment. SAP-C02 Practice Questions (Page 2)

Part of the Content Domain 1: Design Solutions for Organizational Complexity domain, which makes up ~25% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 4–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

10 Concepts in This Objective

Multi-account strategy
AWS Organizations
Service control policies (SCPs)
Account design patterns
Networking across accounts
Identity and access management (IAM) across accounts
Centralized logging and monitoring
Cost management and billing
Compliance and governance
Migration and account consolidation

Questions 6–10

6expert · hard
A company has multiple VPCs across several AWS accounts. They need to enable communication between all VPCs, but they also need to enforce network segmentation so that only specific VPCs can communicate with each other. The network team wants to avoid managing a complex mesh of VPC peering connections. Which solution should the company use?
Select an answer first
7foundation · easy
What is the primary purpose of a trust policy in a cross-account IAM role?
Select an answer first
8foundation · easy
A company wants to centralize API activity logs from all AWS accounts in its organization to a single location for auditing. Which AWS service should be used to collect and aggregate these logs?
Select an answer first
9foundation · easy
Which AWS service can be used to automatically evaluate whether resources in multiple accounts comply with internal security policies, such as requiring encryption on EBS volumes?
Select an answer first
10expert · hard
A company is consolidating multiple AWS accounts into a single organization. They have identified that some accounts have overlapping workloads and want to consolidate them. The company wants to minimize downtime and avoid data loss during the migration. Which approach should the company use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 1.4: Design a Multi-Account AWS Environment. SAP-C02 Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of a trust policy in a cross-account IAM role?

A company wants to centralize API activity logs from all AWS accounts in its organization to a single location for auditing. Which AWS service should be used to collect and aggregate these logs?

Which AWS service can be used to automatically evaluate whether resources in multiple accounts comply with internal security policies, such as requiring encryption on EBS volumes?

A company is consolidating multiple AWS accounts into a single organization. They have identified that some accounts have overlapping workloads and want to consolidate them. The company wants to minimize downtime and avoid data loss during the migration. Which approach should the company use?

Keep studying — Content Domain 1: Design Solutions for Organizational Complexity