2.0 Design for New Solutions SAP-C02 Practice Quiz
174 exam-style questions covering 29% of the SAP-C02 exam. Instant feedback on every answer, progress tracking, no signup required.
This domain is part of the AWS Certified Solutions Architect Professional practice test. Each question is tagged by exam objective and difficulty so you can drill exactly the areas you need.
Sample Questions
A gaming studio is launching a latency-sensitive multiplayer backend. The proposed design creates risk around Infrastructure as code. Which change should be made before production approval?
- A. Use AWS CodePipeline with staged deployments, automated tests, approvals, and rollback paths such as blue/green or canary release patterns
- B. Use placement groups in cluster mode for workloads spread across multiple AZs
- C. Use AWS Auto Scaling without health checks so unhealthy instances stay in service
- D. Use AWS Lambda with no concurrency limits as a DDoS mitigation strategy
A managed CI/CD pipeline supports controlled promotion and recovery when a release fails.
A healthcare analytics provider is designing a new multi-Region service for regulated data. A design review identifies CI/CD deployment strategy as the unresolved architectural decision. Which option is the best recommendation?
- A. Delegate specialized deployment complexity to AWS services such as AWS Proton, AWS Service Catalog, or managed container services when platform teams need standardized self-service
- B. Use IAM password policy to enforce VPC routing decisions
- C. Use IAM session policies to expand a role beyond its attached permissions
- D. Connect on-premises with only a single Site-to-Site VPN tunnel for production
Delegated AWS platform services make advanced deployment patterns available without every team building the same tooling.
A logistics company is deploying a new event-driven shipment tracking solution. The fraud detection workload has requirements that make Infrastructure as code the main design decision. What should the solutions architect recommend?
- A. Use AWS Backup without vault lock to satisfy ransomware-resistant retention
- B. Adopt managed services such as AWS Lambda, Amazon RDS, AWS Fargate, or AWS Elastic Beanstalk when they reduce undifferentiated provisioning and patching work
- C. Use AWS Budgets without alert subscribers to track spend
- D. Allow public S3 ACLs for any bucket that serves static content
Managed services can reduce operational burden while preserving the deployment goals.
A retail enterprise is creating a new ordering system that must handle seasonal spikes. The launch must satisfy business, operational, and governance goals while addressing CI/CD deployment strategy. Which design choice is most appropriate?
- A. Use a public VIF on Direct Connect to reach private VPC subnets
- B. Use AWS CodePipeline with staged deployments, automated tests, approvals, and rollback paths such as blue/green or canary release patterns
- C. Skip permission boundaries when delegating IAM administration to development teams
- D. Use Reserved Instances purchased for one Region to cover usage in a different Region
A managed CI/CD pipeline supports controlled promotion and recovery when a release fails.
A gaming studio is launching a latency-sensitive multiplayer backend. The architecture team must choose a new-solution pattern for change management processes. Which recommendation best fits a professional-level design?
- A. Use On-Demand for stable 24/7 production while sitting on unused 1-year RIs
- B. Delegate specialized deployment complexity to AWS services such as AWS Proton, AWS Service Catalog, or managed container services when platform teams need standardized self-service
- C. Use AWS Health Dashboard as a real-time intrusion detection engine
- D. Use AWS Organizations as a routing protocol between VPCs
Delegated AWS platform services make advanced deployment patterns available without every team building the same tooling.
A healthcare analytics provider is designing a new multi-Region service for regulated data. A design review identifies Infrastructure as code as the unresolved architectural decision. Which option is the best recommendation?
- A. Use a NAT gateway as a stateful inspection firewall for east-west traffic
- B. Disable AWS Shield Standard for cost savings
- C. Delegate specialized deployment complexity to AWS services such as AWS Proton, AWS Service Catalog, or managed container services when platform teams need standardized self-service
- D. Use AWS Backup vault lock in governance mode to enforce regulatory immutability
Delegated AWS platform services make advanced deployment patterns available without every team building the same tooling.
A manufacturing company is modernizing a new plant operations platform. The architecture team must choose a new-solution pattern for CI/CD deployment strategy. Which recommendation best fits a professional-level design?
- A. Use Amazon Route 53 Resolver DNS Firewall to authenticate API Gateway requests
- B. Use a single public subnet for all tiers and accounts
- C. Adopt managed services such as AWS Lambda, Amazon RDS, AWS Fargate, or AWS Elastic Beanstalk when they reduce undifferentiated provisioning and patching work
- D. Use CloudWatch dashboards as the disaster recovery runbook
Managed services can reduce operational burden while preserving the deployment goals.
A retail enterprise is creating a new ordering system that must handle seasonal spikes. The launch must satisfy business, operational, and governance goals while addressing Infrastructure as code. Which design choice is most appropriate?
- A. Use manual console clicks for production deployments to retain hands-on control
- B. Skip patching for instances behind a private subnet because they have no internet access
- C. Use Amazon CloudWatch metrics alone without alarms to drive operational response
- D. Use AWS CodePipeline with staged deployments, automated tests, approvals, and rollback paths such as blue/green or canary release patterns
A managed CI/CD pipeline supports controlled promotion and recovery when a release fails.
Key Terms in This Domain
- AWS Elastic Disaster Recovery: Continuous replication and failover for on-prem and AWS workloads
- ECS/EKS Anywhere: Run ECS/EKS on customer-managed infrastructure (on-prem, edge)
- RTO / RPO: Recovery time and recovery point objectives drive DR strategy choice
- Backup and restore: Lowest-cost DR pattern; restores from backups on disaster
- Application Recovery Controller: Coordinates failover for multi-Region applications
- AWS Application Migration Service: Lift-and-shift rehosting via continuous block-level replication (MGN)
- AWS Trusted Advisor: Best-practice checks across cost, performance, security, and limits
- AWS CodeDeploy: Automated application deployment to compute services
- AWS Organizations: Multi-account management with consolidated billing and policies
- Control Tower controls: Mandatory, strongly recommended, and elective guardrails for landing zones
Link to this quiz
Studying with a group or teaching a class? Send this address or paste the link into your notes, wiki, or course page:
https://quizbuffet.com/aws-solutions-architect-professional/design-for-new-solutions/
<a href="https://quizbuffet.com/aws-solutions-architect-professional/design-for-new-solutions/">AWS Solutions Architect Professional Design for New Solutions practice quiz on QuizBuffet</a>
Other SAP-C02 Domains
- 1.0 Design Solutions for Organizational Complexity
- 3.0 Continuous Improvement for Existing Solutions
- 4.0 Accelerate Workload Migration and Modernization
← Back to SAP-C02 practice test overview
Questions are written against the published SAP-C02 objectives and checked for accuracy and balance before they go live. How QuizBuffet writes and reviews its questions.