A company is modernizing a legacy application and must meet a regulatory requirement that all personal data be stored in a specific country. The new architecture will use AWS services. Which combination of security and compliance controls is required to satisfy this requirement?

Configure AWS Organizations with service control policies (SCPs) to deny access to all AWS Regions except the one in the required country.

Use AWS Key Management Service (KMS) with a customer managed key and enable S3 default encryption to protect personal data at rest.

Enable AWS CloudTrail and Amazon GuardDuty to monitor and detect unauthorized access to personal data.

Deploy the application in an AWS Region located in the required country, use AWS KMS with a customer managed key for encryption, and restrict access with IAM policies and VPC security groups.

Which AWS service is used to migrate databases to AWS with minimal downtime?

AWS Database Migration Service (DMS)

AWSCertified Solutions Architect - Professional

Domain 4Objective 3

Task 4.3: Determine a New Architecture for Existing Workloads. SAP-C02 Practice Questions (Page 2)

Part of the Content Domain 4: Accelerate Workload Migration and Modernization domain, which makes up ~16% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

10concepts

10 Concepts in This Objective

Assess current architecture
Define target architecture patterns
Evaluate AWS services for modernization
Design for scalability and elasticity
Design for high availability and fault tolerance
Plan data migration and storage strategy
Address security and compliance in new architecture
Optimize cost in target architecture
Plan for operational excellence
Validate architecture with migration tools

Questions 6–10

6foundation · easy
Which deployment strategy is used to protect a workload from an Availability Zone failure?
Select an answer first
7foundation · medium
A company is modernizing a legacy application and must meet a regulatory requirement that all personal data be stored in a specific country. The new architecture will use AWS services. Which combination of security and compliance controls is required to satisfy this requirement?
Select an answer first
8foundation · easy
A workload component requires a fully managed relational database with automatic scaling. Which AWS service is most appropriate?
Select an answer first
9foundation · easy
Which AWS service is used to migrate databases to AWS with minimal downtime?
Select an answer first
10foundation · medium
A company is designing a new architecture for a web application. The operations team requires a centralized view of application logs, metrics, and traces to troubleshoot issues after migration. Which AWS service should be used to collect and analyze this telemetry data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 4.3: Determine a New Architecture for Existing Workloads. SAP-C02 Practice Questions (Page 2)

Questions 6–10

Which deployment strategy is used to protect a workload from an Availability Zone failure?

A company is modernizing a legacy application and must meet a regulatory requirement that all personal data be stored in a specific country. The new architecture will use AWS services. Which combination of security and compliance controls is required to satisfy this requirement?

A workload component requires a fully managed relational database with automatic scaling. Which AWS service is most appropriate?

Which AWS service is used to migrate databases to AWS with minimal downtime?

A company is designing a new architecture for a web application. The operations team requires a centralized view of application logs, metrics, and traces to troubleshoot issues after migration. Which AWS service should be used to collect and analyze this telemetry data?

Keep studying — Content Domain 4: Accelerate Workload Migration and Modernization