A company is subject to the General Data Protection Regulation (GDPR) and must ensure that personal data of EU citizens is not transferred outside the EU. The company is planning to use Amazon S3 and Amazon RDS. Which solution should the solutions architect implement to meet this requirement?

Use S3 Cross-Region Replication to replicate data to an EU region from a US region.

Use AWS Outposts to store data on-premises in the EU, but run the application in a US region.

Deploy the application in an EU region and configure S3 and RDS to use that region.

Use AWS Key Management Service (AWS KMS) with keys stored in the EU to encrypt data in a US region.

A solutions architect is integrating security controls into a new application. The architect wants to ensure that security is applied without adding significant latency to user requests. Which approach best balances security and performance?

Disable logging to reduce overhead

Perform deep packet inspection on every request at the application layer

Route all traffic through a third-party proxy for inspection

Use AWS WAF with a managed rule set at the edge

A solutions architect needs to protect data at rest in an Amazon S3 bucket. Which AWS service can be used to encrypt the data using server-side encryption with AWS KMS?

AWS Key Management Service (AWS KMS)

AWSCertified Solutions Architect - Professional

Domain 2Objective 3

Task 2.3: Determine Security Controls Based on Requirements SAP-C02 Practice Questions (Page 1)

Part of the Content Domain 2: Design for New Solutions domain, which makes up ~31% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 4–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 1–5

1expert · medium
A company is subject to the General Data Protection Regulation (GDPR) and must ensure that personal data of EU citizens is not transferred outside the EU. The company is planning to use Amazon S3 and Amazon RDS. Which solution should the solutions architect implement to meet this requirement?
Select an answer first
2foundation · easy
A solutions architect needs to set up a monitoring solution that sends alerts when CPU utilization of an EC2 instance exceeds a threshold. Which AWS service should be used to create the alarm and send notifications?
Select an answer first
3foundation · easy
A solutions architect is integrating security controls into a new application. The architect wants to ensure that security is applied without adding significant latency to user requests. Which approach best balances security and performance?
Select an answer first
4foundation · easy
A solutions architect needs to protect data at rest in an Amazon S3 bucket. Which AWS service can be used to encrypt the data using server-side encryption with AWS KMS?
Select an answer first
5foundation · easy
A solutions architect is designing IAM policies for a new application. The requirement is to grant users only the permissions necessary to perform their job functions. Which IAM principle does this requirement describe?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 2.3: Determine Security Controls Based on Requirements SAP-C02 Practice Questions (Page 1)

Questions 1–5

A company is subject to the General Data Protection Regulation (GDPR) and must ensure that personal data of EU citizens is not transferred outside the EU. The company is planning to use Amazon S3 and Amazon RDS. Which solution should the solutions architect implement to meet this requirement?

A solutions architect needs to set up a monitoring solution that sends alerts when CPU utilization of an EC2 instance exceeds a threshold. Which AWS service should be used to create the alarm and send notifications?

A solutions architect is integrating security controls into a new application. The architect wants to ensure that security is applied without adding significant latency to user requests. Which approach best balances security and performance?

A solutions architect needs to protect data at rest in an Amazon S3 bucket. Which AWS service can be used to encrypt the data using server-side encryption with AWS KMS?

A solutions architect is designing IAM policies for a new application. The requirement is to grant users only the permissions necessary to perform their job functions. Which IAM principle does this requirement describe?

Keep studying — Content Domain 2: Design for New Solutions