Practice Exams:

View All

Amazon AWS Solutions Architect Professional SAP-C02 Infrastructure As Code CI/CD Rollback Practice Test

Domain 2.1 • 25 original questions

This AWS SAP-C02 AWS Certified Solutions Architect – Professional practice test focuses on infrastructure as code ci/cd rollback and managed deployment through original architecture scenarios aligned to the current AWS Certification exam guide. Use the full ExamSnap SAP-C02 collection for practice across all four content domains. For broader exam preparation, review the Amazon AWS Certified Solutions Architect – Professional SAP-C02 Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

During a multi-account governance review at Lucerne Publishing, the enterprise architect is designing a machine learning inference service. The requirement is to select a deployment method that can automatically reverse a bad application release while minimizing ongoing operational burden. Which architecture is the best fit? The current estate includes 45 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. Prefer an AWS-managed capability when it meets the requirements with less operational overhead.

Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms
Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Use IAM roles or other temporary-credential patterns with least privilege, and automate patch compliance through Systems Manager or managed-service patching

Correct answer: A

Why: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

Option review:

A: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

B: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while minimizing ongoing operational burden.

C: Storage tiering reduces cost when lifecycle transitions match real access patterns, minimum-storage-duration rules, and retrieval expectations. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while minimizing ongoing operational burden.

D: Temporary scoped credentials reduce secret exposure, and automated patch workflows improve compliance without expanding application privileges. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while minimizing ongoing operational burden.

Learning point: Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback. Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. In this variant, the decision also has to work while minimizing ongoing operational burden.

Question 2

Datum Analytics operates a payment platform. In a migration wave planning session, the cloud financial management lead must introduce a major platform upgrade while limiting risk to production users while minimizing ongoing operational burden. Which option should be recommended? The current estate includes 5 AWS accounts and active workloads in eu-west-1 and eu-central-1. The team wants the most direct architecture decision for this requirement.
Use measured access patterns and latency/throughput requirements to choose the storage and delivery architecture, then monitor the relevant performance metrics
Use service-appropriate data replication, automated backup policies, and centralized monitoring with automated recovery actions
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria

Correct answer: D

Why: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

Option review:

A: Performance architecture should start from access patterns and measurable objectives, not from one default storage service. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while minimizing ongoing operational burden.

B: Replication supports continuity, backups protect against logical loss, and monitoring/automation reduce detection and recovery time for common failures. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while minimizing ongoing operational burden.

C: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while minimizing ongoing operational burden.

D: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

Learning point: Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria. Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. In this variant, the decision also has to work while minimizing ongoing operational burden.

Question 3

A security architect at Wide World Importers is reviewing a IoT ingestion service. The business requires the team to delegate undifferentiated deployment and configuration tasks to AWS managed services while minimizing ongoing operational burden. Which design most directly satisfies the requirement? The current estate includes 12 AWS accounts and active workloads in us-east-1 and us-west-2. The design must preserve security and auditability while meeting the stated objective.

Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Use IAM roles or other temporary-credential patterns with least privilege, and automate patch compliance through Systems Manager or managed-service patching
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing

Correct answer: B

Why: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

Option review:

A: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while minimizing ongoing operational burden.

B: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate while minimizing ongoing operational burden.

C: Temporary scoped credentials reduce secret exposure, and automated patch workflows improve compliance without expanding application privileges. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while minimizing ongoing operational burden.

D: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while minimizing ongoing operational burden.

Learning point: Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching. Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. In this variant, the decision also has to work while minimizing ongoing operational burden.

Question 4

Bellows University is changing its batch settlement service as part of a security design review. Which AWS approach best enables the team to select a deployment method that can automatically reverse a bad application release while supporting automated and repeatable deployment? The current estate includes 19 AWS accounts and active workloads in us-east-1 and eu-west-1. Select the option that satisfies the requirement with the fewest unnecessary moving parts.

Use narrowly scoped security groups and network ACLs as required, and use VPC endpoints or PrivateLink for supported private service integrations
Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms

Correct answer: C

Option review:

A: Security groups and NACLs control network flows at different layers, while VPC endpoints avoid unnecessary public paths to supported services. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while supporting automated and repeatable deployment.

B: Instance families provide different resource profiles; elasticity and rightsizing align capacity to workload behavior instead of static peak estimates. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while supporting automated and repeatable deployment.

C: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate while supporting automated and repeatable deployment.

D: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while supporting automated and repeatable deployment.

Question 5

Which AWS architecture principle or service combination best addresses this requirement for Blue Yonder Airlines: introduce a major platform upgrade while limiting risk to production users while supporting automated and repeatable deployment? The current estate includes 26 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. Choose the option that best meets the stated constraints without introducing an unrelated redesign.

Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing
Implement the DR architecture that meets RTO/RPO and run scheduled recovery tests that validate dependencies, data, DNS, and operational procedures
Prefer the purpose-built managed AWS service that satisfies functional, security, reliability, and performance requirements with less operational ownership
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria

Correct answer: D

Option review:

A: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while supporting automated and repeatable deployment.

B: A continuity design is incomplete until failover and restore procedures are tested and measured against business recovery objectives. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while supporting automated and repeatable deployment.

C: Managed-service adoption is valuable when it reduces undifferentiated operations without violating control, performance, or portability requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while supporting automated and repeatable deployment.

Question 6

For a payment platform at City Power, a production readiness review identifies one priority: delegate undifferentiated deployment and configuration tasks to AWS managed services while supporting automated and repeatable deployment. Which AWS design should the team choose? The current estate includes 33 AWS accounts and active workloads in eu-west-1 and eu-central-1. Assume all unspecified components already meet their requirements.

Use cost and utilization data to rightsize resources, then choose Savings Plans, Reserved Instances, Spot, or On-Demand according to predictability and interruption tolerance
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing

Correct answer: B

Option review:

A: Rightsizing addresses resource efficiency first; pricing models then reduce the cost of the correctly sized usage pattern. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while supporting automated and repeatable deployment.

C: Instance families provide different resource profiles; elasticity and rightsizing align capacity to workload behavior instead of static peak estimates. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while supporting automated and repeatable deployment.

Question 7

Proseware Labs has already validated the surrounding application components. The remaining architecture requirement for its IoT ingestion service is to select a deployment method that can automatically reverse a bad application release with an explicit rollback or recovery path if the change fails. Which option is best? The current estate includes 40 AWS accounts and active workloads in us-east-1 and us-west-2. Prefer an AWS-managed capability when it meets the requirements with less operational overhead.

Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing
Use Auto Scaling and managed integration services such as SQS, SNS, or Step Functions to create elastic, loosely coupled components

Correct answer: A

Option review:

B: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of with an explicit rollback or recovery path if the change fails.

C: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of with an explicit rollback or recovery path if the change fails.

D: Elastic scaling and asynchronous decoupling reduce cascading failures and allow components to recover or scale independently. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of with an explicit rollback or recovery path if the change fails.

Question 8

While conducting a hybrid connectivity redesign, the network architect at Southridge Video needs to introduce a major platform upgrade while limiting risk to production users with an explicit rollback or recovery path if the change fails. Which architecture decision best matches the stated constraints? The current estate includes 47 AWS accounts and active workloads in us-east-1 and eu-west-1. The team wants the most direct architecture decision for this requirement.

Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics
Implement the DR architecture that meets RTO/RPO and run scheduled recovery tests that validate dependencies, data, DNS, and operational procedures
Review and raise service quotas before demand increases, and use the Route 53 routing policy that matches the application traffic requirement
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria

Correct answer: D

Option review:

A: Instance families provide different resource profiles; elasticity and rightsizing align capacity to workload behavior instead of static peak estimates. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of with an explicit rollback or recovery path if the change fails.

B: A continuity design is incomplete until failover and restore procedures are tested and measured against business recovery objectives. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of with an explicit rollback or recovery path if the change fails.

C: Capacity planning must include service quotas, and Route 53 routing policies should be selected based on health, latency, geography, or other stated routing goals. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of with an explicit rollback or recovery path if the change fails.

Question 9

During a resilience assessment at Woodgrove Bank, the enterprise architect is designing a machine learning inference service. The requirement is to delegate undifferentiated deployment and configuration tasks to AWS managed services with an explicit rollback or recovery path if the change fails. Which architecture is the best fit? The current estate includes 7 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. The design must preserve security and auditability while meeting the stated objective.

Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Use KMS/service-native encryption and TLS for data protection, with AWS WAF, Shield, and managed security services as appropriate for the threat model
Use elastic stateless tiers with managed queues or events, caching, replicas, and service-specific scaling to decouple bottlenecks and preserve availability
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching

Correct answer: D

Option review:

A: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of with an explicit rollback or recovery path if the change fails.

B: Encryption protects confidentiality, while AWS WAF, Shield, and related managed services mitigate web and network attacks at scale. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of with an explicit rollback or recovery path if the change fails.

C: Professional solution design combines multiple patterns so capacity, failure, and latency are isolated rather than propagated across the stack. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of with an explicit rollback or recovery path if the change fails.

D: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate with an explicit rollback or recovery path if the change fails.

Question 10

Relecloud Systems is documenting its target-state architecture. Which choice most accurately addresses the need to select a deployment method that can automatically reverse a bad application release without introducing an unrelated application rewrite? The current estate includes 14 AWS accounts and active workloads in eu-west-1 and eu-central-1. Select the option that satisfies the requirement with the fewest unnecessary moving parts.

Implement the DR architecture that meets RTO/RPO and run scheduled recovery tests that validate dependencies, data, DNS, and operational procedures
Model data transfer paths and managed-service costs with AWS pricing tools, reduce avoidable transfer, and enforce budgets/usage controls
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching

Correct answer: C

Option review:

A: A continuity design is incomplete until failover and restore procedures are tested and measured against business recovery objectives. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of without introducing an unrelated application rewrite.

B: Data-transfer architecture can materially affect cost; expenditure controls and service selection should be designed with traffic flows and business value in mind. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of without introducing an unrelated application rewrite.

C: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate without introducing an unrelated application rewrite.

D: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of without introducing an unrelated application rewrite.

Question 11

A security architect at Fabrikam Health is reviewing a IoT ingestion service. The business requires the team to introduce a major platform upgrade while limiting risk to production users without introducing an unrelated application rewrite. Which design most directly satisfies the requirement? The current estate includes 21 AWS accounts and active workloads in us-east-1 and us-west-2. Choose the option that best meets the stated constraints without introducing an unrelated redesign.

Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Review and raise service quotas before demand increases, and use the Route 53 routing policy that matches the application traffic requirement
Use Auto Scaling and managed integration services such as SQS, SNS, or Step Functions to create elastic, loosely coupled components

Correct answer: B

Option review:

A: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of without introducing an unrelated application rewrite.

B: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This directly addresses the primary requirement and remains appropriate without introducing an unrelated application rewrite.

D: Elastic scaling and asynchronous decoupling reduce cascading failures and allow components to recover or scale independently. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of without introducing an unrelated application rewrite.

Question 12

Trey Research is changing its batch settlement service as part of a global expansion project. Which AWS approach best enables the team to delegate undifferentiated deployment and configuration tasks to AWS managed services without introducing an unrelated application rewrite? The current estate includes 28 AWS accounts and active workloads in us-east-1 and eu-west-1. Assume all unspecified components already meet their requirements.

Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Prefer the purpose-built managed AWS service that satisfies functional, security, reliability, and performance requirements with less operational ownership
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing
Model data transfer paths and managed-service costs with AWS pricing tools, reduce avoidable transfer, and enforce budgets/usage controls

Correct answer: A

Option review:

A: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate without introducing an unrelated application rewrite.

B: Managed-service adoption is valuable when it reduces undifferentiated operations without violating control, performance, or portability requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of without introducing an unrelated application rewrite.

C: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of without introducing an unrelated application rewrite.

D: Data-transfer architecture can materially affect cost; expenditure controls and service selection should be designed with traffic flows and business value in mind. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of without introducing an unrelated application rewrite.

Question 13

An architecture board at Northwind Media asks the site reliability architect to select a deployment method that can automatically reverse a bad application release while preserving least-privilege administration for a machine learning inference service. Which recommendation is most appropriate? The current estate includes 35 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. Prefer an AWS-managed capability when it meets the requirements with less operational overhead.

Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Choose the purpose-built database and apply caches, replicas, or buffering according to consistency, query, and latency requirements
Use elastic stateless tiers with managed queues or events, caching, replicas, and service-specific scaling to decouple bottlenecks and preserve availability
Use service-appropriate data replication, automated backup policies, and centralized monitoring with automated recovery actions

Correct answer: A

Option review:

B: Purpose-built databases and caching patterns improve performance when selected for the actual data model, access pattern, and consistency requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while preserving least-privilege administration.

C: Professional solution design combines multiple patterns so capacity, failure, and latency are isolated rather than propagated across the stack. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while preserving least-privilege administration.

D: Replication supports continuity, backups protect against logical loss, and monitoring/automation reduce detection and recovery time for common failures. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while preserving least-privilege administration.

Question 14

For a payment platform at Coho Financial, a migration wave planning session identifies one priority: introduce a major platform upgrade while limiting risk to production users while preserving least-privilege administration. Which AWS design should the team choose? The current estate includes 42 AWS accounts and active workloads in eu-west-1 and eu-central-1. The team wants the most direct architecture decision for this requirement.

Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics
Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing

Correct answer: C

Option review:

B: Storage tiering reduces cost when lifecycle transitions match real access patterns, minimum-storage-duration rules, and retrieval expectations. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while preserving least-privilege administration.

C: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This directly addresses the primary requirement and remains appropriate while preserving least-privilege administration.

D: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while preserving least-privilege administration.

Question 15

A principal architect asks which AWS approach is intended to delegate undifferentiated deployment and configuration tasks to AWS managed services while preserving least-privilege administration. What is the best answer? The current estate includes 49 AWS accounts and active workloads in us-east-1 and us-west-2. The design must preserve security and auditability while meeting the stated objective.

Use managed multi-AZ or multi-Region capabilities according to the failure scope, with tested application and database failover
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Review and raise service quotas before demand increases, and use the Route 53 routing policy that matches the application traffic requirement
Model data transfer paths and managed-service costs with AWS pricing tools, reduce avoidable transfer, and enforce budgets/usage controls

Correct answer: B

Option review:

A: Reliability depends on matching redundancy to the required failure domain and using managed failover where it reduces operational risk. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while preserving least-privilege administration.

C: Capacity planning must include service quotas, and Route 53 routing policies should be selected based on health, latency, geography, or other stated routing goals. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while preserving least-privilege administration.

Question 16

While conducting a security design review, the network architect at Fourth Coffee needs to select a deployment method that can automatically reverse a bad application release while keeping the design elastic as demand changes. Which architecture decision best matches the stated constraints? The current estate includes 9 AWS accounts and active workloads in us-east-1 and eu-west-1. Select the option that satisfies the requirement with the fewest unnecessary moving parts.

Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms
Use KMS/service-native encryption and TLS for data protection, with AWS WAF, Shield, and managed security services as appropriate for the threat model

Correct answer: B

Option review:

A: Storage tiering reduces cost when lifecycle transitions match real access patterns, minimum-storage-duration rules, and retrieval expectations. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping the design elastic as demand changes.

B: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate while keeping the design elastic as demand changes.

C: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping the design elastic as demand changes.

D: Encryption protects confidentiality, while AWS WAF, Shield, and related managed services mitigate web and network attacks at scale. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping the design elastic as demand changes.

Question 17

During a modernization initiative at Consolidated Messenger, the enterprise architect is designing a machine learning inference service. The requirement is to introduce a major platform upgrade while limiting risk to production users while keeping the design elastic as demand changes. Which architecture is the best fit? The current estate includes 16 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. Choose the option that best meets the stated constraints without introducing an unrelated redesign.

Use managed multi-AZ or multi-Region capabilities according to the failure scope, with tested application and database failover
Use multi-AZ or multi-Region deployment as required, with health-aware Route 53 or other routing and managed failover mechanisms
Use elastic stateless tiers with managed queues or events, caching, replicas, and service-specific scaling to decouple bottlenecks and preserve availability
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria

Correct answer: D

Option review:

A: Reliability depends on matching redundancy to the required failure domain and using managed failover where it reduces operational risk. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while keeping the design elastic as demand changes.

B: AWS global and regional infrastructure plus health-aware routing can preserve application availability when a location or component fails. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while keeping the design elastic as demand changes.

C: Professional solution design combines multiple patterns so capacity, failure, and latency are isolated rather than propagated across the stack. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while keeping the design elastic as demand changes.

Question 18

Litware Manufacturing operates a payment platform. In a production readiness review, the cloud financial management lead must delegate undifferentiated deployment and configuration tasks to AWS managed services while keeping the design elastic as demand changes. Which option should be recommended? The current estate includes 23 AWS accounts and active workloads in eu-west-1 and eu-central-1. Assume all unspecified components already meet their requirements.

Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Use measured access patterns and latency/throughput requirements to choose the storage and delivery architecture, then monitor the relevant performance metrics
Use service-appropriate data replication, automated backup policies, and centralized monitoring with automated recovery actions
Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics

Correct answer: A

Option review:

B: Performance architecture should start from access patterns and measurable objectives, not from one default storage service. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping the design elastic as demand changes.

C: Replication supports continuity, backups protect against logical loss, and monitoring/automation reduce detection and recovery time for common failures. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping the design elastic as demand changes.

D: Instance families provide different resource profiles; elasticity and rightsizing align capacity to workload behavior instead of static peak estimates. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping the design elastic as demand changes.

Question 19

A security architect at Humongous Insurance is reviewing a IoT ingestion service. The business requires the team to select a deployment method that can automatically reverse a bad application release while using managed services when they satisfy the requirement. Which design most directly satisfies the requirement? The current estate includes 30 AWS accounts and active workloads in us-east-1 and us-west-2. Prefer an AWS-managed capability when it meets the requirements with less operational overhead.

Model data transfer paths and managed-service costs with AWS pricing tools, reduce avoidable transfer, and enforce budgets/usage controls
Use cost and utilization data to rightsize resources, then choose Savings Plans, Reserved Instances, Spot, or On-Demand according to predictability and interruption tolerance
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback

Correct answer: D

Option review:

A: Data-transfer architecture can materially affect cost; expenditure controls and service selection should be designed with traffic flows and business value in mind. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while using managed services when they satisfy the requirement.

B: Rightsizing addresses resource efficiency first; pricing models then reduce the cost of the correctly sized usage pattern. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while using managed services when they satisfy the requirement.

C: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while using managed services when they satisfy the requirement.

D: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This directly addresses the primary requirement and remains appropriate while using managed services when they satisfy the requirement.

Question 20

Which solution is the strongest match for the following professional-level architecture requirement: introduce a major platform upgrade while limiting risk to production users while using managed services when they satisfy the requirement? The current estate includes 37 AWS accounts and active workloads in us-east-1 and eu-west-1. The team wants the most direct architecture decision for this requirement.

Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Choose the purpose-built database and apply caches, replicas, or buffering according to consistency, query, and latency requirements
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing

Correct answer: A

Option review:

A: Professional architectures should treat upgrades as controlled changes with measurable entry, success, and rollback conditions. This directly addresses the primary requirement and remains appropriate while using managed services when they satisfy the requirement.

C: Purpose-built databases and caching patterns improve performance when selected for the actual data model, access pattern, and consistency requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while using managed services when they satisfy the requirement.

D: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while using managed services when they satisfy the requirement.

Question 21

An architecture board at Alpine Sports asks the site reliability architect to delegate undifferentiated deployment and configuration tasks to AWS managed services while using managed services when they satisfy the requirement for a machine learning inference service. Which recommendation is most appropriate? The current estate includes 44 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. The design must preserve security and auditability while meeting the stated objective.

Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching
Select instance families that match resource characteristics, use Auto Scaling where appropriate, and rightsize from observed metrics
Choose the purpose-built database and apply caches, replicas, or buffering according to consistency, query, and latency requirements
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback

Correct answer: A

Option review:

A: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate while using managed services when they satisfy the requirement.

B: Instance families provide different resource profiles; elasticity and rightsizing align capacity to workload behavior instead of static peak estimates. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while using managed services when they satisfy the requirement.

C: Purpose-built databases and caching patterns improve performance when selected for the actual data model, access pattern, and consistency requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while using managed services when they satisfy the requirement.

D: Versioned infrastructure and automated deployment pipelines reduce drift and make failed changes repeatable and reversible. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while using managed services when they satisfy the requirement.

Question 22

For a payment platform at Adventure Works, a new workload design identifies one priority: select a deployment method that can automatically reverse a bad application release while keeping observability sufficient to validate the result. Which AWS design should the team choose? The current estate includes 4 AWS accounts and active workloads in eu-west-1 and eu-central-1. Select the option that satisfies the requirement with the fewest unnecessary moving parts.

Choose the purpose-built database and apply caches, replicas, or buffering according to consistency, query, and latency requirements
Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Select the architecture that meets the declared recovery, security, and budget objectives together, and validate those objectives with monitoring and testing
Use measured access patterns and latency/throughput requirements to choose the storage and delivery architecture, then monitor the relevant performance metrics

Correct answer: B

Option review:

A: Purpose-built databases and caching patterns improve performance when selected for the actual data model, access pattern, and consistency requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping observability sufficient to validate the result.

C: AWS Well-Architected decisions should balance reliability, security, operational excellence, performance efficiency, and cost instead of optimizing a single pillar in isolation. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping observability sufficient to validate the result.

D: Performance architecture should start from access patterns and measurable objectives, not from one default storage service. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while keeping observability sufficient to validate the result.

Question 23

VanArsdel Energy has already validated the surrounding application components. The remaining architecture requirement for its IoT ingestion service is to introduce a major platform upgrade while limiting risk to production users while keeping observability sufficient to validate the result. Which option is best? The current estate includes 11 AWS accounts and active workloads in us-east-1 and us-west-2. Choose the option that best meets the stated constraints without introducing an unrelated redesign.

Use service-appropriate data replication, automated backup policies, and centralized monitoring with automated recovery actions
Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Use a staged deployment or upgrade plan with explicit change controls, validation gates, and rollback criteria
Use Auto Scaling and managed integration services such as SQS, SNS, or Step Functions to create elastic, loosely coupled components

Correct answer: C

Option review:

A: Replication supports continuity, backups protect against logical loss, and monitoring/automation reduce detection and recovery time for common failures. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while keeping observability sufficient to validate the result.

D: Elastic scaling and asynchronous decoupling reduce cascading failures and allow components to recover or scale independently. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to introduce a major platform upgrade while limiting risk to production users under the additional constraint of while keeping observability sufficient to validate the result.

Question 24

While conducting a global expansion project, the network architect at Contoso Retail needs to delegate undifferentiated deployment and configuration tasks to AWS managed services while keeping observability sufficient to validate the result. Which architecture decision best matches the stated constraints? The current estate includes 18 AWS accounts and active workloads in us-east-1 and eu-west-1. Assume all unspecified components already meet their requirements.

Model data transfer paths and managed-service costs with AWS pricing tools, reduce avoidable transfer, and enforce budgets/usage controls
Use narrowly scoped security groups and network ACLs as required, and use VPC endpoints or PrivateLink for supported private service integrations
Choose the purpose-built database and apply caches, replicas, or buffering according to consistency, query, and latency requirements
Adopt the appropriate managed AWS service and use Systems Manager or service-native automation for configuration and patching

Correct answer: D

Option review:

A: Data-transfer architecture can materially affect cost; expenditure controls and service selection should be designed with traffic flows and business value in mind. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping observability sufficient to validate the result.

B: Security groups and NACLs control network flows at different layers, while VPC endpoints avoid unnecessary public paths to supported services. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping observability sufficient to validate the result.

C: Purpose-built databases and caching patterns improve performance when selected for the actual data model, access pattern, and consistency requirements. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to delegate undifferentiated deployment and configuration tasks to AWS managed services under the additional constraint of while keeping observability sufficient to validate the result.

D: Managed services and Systems Manager can reduce custom infrastructure administration while keeping configuration and operational tasks repeatable and auditable. This directly addresses the primary requirement and remains appropriate while keeping observability sufficient to validate the result.

Question 25

Following an acquisition, Lucerne Publishing is rationalizing its machine learning inference service. The architecture board documented two acceptance criteria: select a deployment method that can automatically reverse a bad application release; and the solution must do so while avoiding a single manual recovery dependency. Which target-state recommendation should the enterprise architect approve? The current estate includes 25 AWS accounts and active workloads in ap-southeast-1 and ap-southeast-2. Prefer an AWS-managed capability when it meets the requirements with less operational overhead.

Use infrastructure as code with CloudFormation and an automated CI/CD deployment strategy that supports health checks and rollback
Use S3 storage classes and lifecycle policies, or equivalent service-native tiering, based on access frequency and retrieval requirements
Use narrowly scoped security groups and network ACLs as required, and use VPC endpoints or PrivateLink for supported private service integrations
Use managed multi-AZ or multi-Region capabilities according to the failure scope, with tested application and database failover

Correct answer: A

Option review:

B: Storage tiering reduces cost when lifecycle transitions match real access patterns, minimum-storage-duration rules, and retrieval expectations. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while avoiding a single manual recovery dependency.

C: Security groups and NACLs control network flows at different layers, while VPC endpoints avoid unnecessary public paths to supported services. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while avoiding a single manual recovery dependency.

D: Reliability depends on matching redundancy to the required failure domain and using managed failover where it reduces operational risk. This can be valid in another AWS architecture context, but it does not most directly satisfy the primary requirement to select a deployment method that can automatically reverse a bad application release under the additional constraint of while avoiding a single manual recovery dependency.

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Related posts: