30 Free AWS SAP-C02 Practice Questions

SAP-C02 Practice Questions

1. Question 1.A company has introduced a new policy that allows employees to work remotely from their homes if they connect by using a VPN. The company is hosting internal applications with VPCs in multiple AWS accounts. Currently, the applications are accessible from the company's on-premises office network through an AWS Site-to-Site VPN connection. The VPC in the company's main AWS account has peering connections established with VPCs in other AWS accounts. A solutions architect must design a scalable AWS Client VPN solution for employees to use while they work from home. What is the most cost-effective solution that meets these requirements?

   • A.Create a Client VPN endpoint in each AWS account. Configure required routing that allows access to internal applications.
   • B.Create a Client VPN endpoint in the main AWS account. Configure required routing that allows access to internal applications.(correct answer)
   • C.Create a Client VPN endpoint in the main AWS account. Provision a Transit Gateway that is connected to each AWS account. Configure required routing that allows access to internal applications.
   • D.Create a Client VPN endpoint in the main AWS account. Establish connectivity between the Client VPN endpoint and the AWS Site-to-Site VPN.
   Show answer & explanationHide answer

   Correct answer: B

   Create a Client VPN endpoint in the main AWS account. Configure required routing that allows access to internal applications.

   Explanation

   This solution uses a hub-and-spoke model by deploying a single Client VPN endpoint in the main VPC. Since the main VPC already has peering connections to other VPCs, traffic can be routed across them without additional infrastructure costs.

2. Question 2.A company is planning to migrate an application to AWS. The application runs as a Docker container and uses an NFS version 4 fileshare. A solutions architect must design a secure and scalable containerized solution that does not require provisioning or management of the underlying infrastructure. Which solution will meet these requirements?

   • A.Deploy the application containers by using Amazon ECS with the Fargate launch type. Use Amazon EFS for shared storage.(correct answer)
   • B.Deploy the application containers by using Amazon ECS with the Fargate launch type. Use Amazon FSx for Lustre for shared storage.
   • C.Deploy the application containers by using Amazon ECS with the EC2 launch type and autoscaling turned on. Use Amazon EFS for shared storage.
   • D.Deploy the application containers by using Amazon ECS with the EC2 launch type and autoscaling turned on. Use Amazon EBS volumes with multi-attach enabled for shared storage.
   Show answer & explanationHide answer

   Correct answer: A

   Deploy the application containers by using Amazon ECS with the Fargate launch type. Use Amazon EFS for shared storage.

   Explanation

   ECS Fargate removes the need to manage infrastructure, and Amazon EFS provides NFSv4-compatible shared storage, making this the correct serverless and scalable solution.

3. Question 3.A company is migrating applications to AWS and wants to modernize quickly after networking and security strategies are finalized. They have set up a Direct Connect connection in a central network account and expect to have hundreds of AWS accounts and VPCs. The corporate network must access AWS resources seamlessly and communicate with all VPCs. Additionally, the company wants to route all cloud resources to the internet through its on-premises data center. Which combination of steps will meet these requirements? (Choose three.)

   • A.Create a Direct Connect gateway in the central account and associate it with virtual private gateways.
   • B.Create a Direct Connect gateway and a Transit Gateway in the central network account and connect them using a transit VIF.(correct answer)
   • C.Provision an internet gateway and attach it to subnets.
   • D.Share the Transit Gateway with other accounts and attach VPCs to it.(correct answer)
   • E.Provision VPC peering as necessary.
   • F.Use private subnets and route internet-bound traffic through on-premises NAT via Direct Connect.(correct answer)
   Show answer & explanationHide answer

   Correct answer: B, D, F

   Create a Direct Connect gateway and a Transit Gateway in the central network account and connect them using a transit VIF. / Share the Transit Gateway with other accounts and attach VPCs to it. / Use private subnets and route internet-bound traffic through on-premises NAT via Direct Connect.

   Explanation

   A Transit Gateway enables scalable hub-and-spoke connectivity. Sharing it via AWS RAM allows multi-account attachment. Routing internet traffic through on-premises NAT ensures centralized egress.

4. Question 4.A solutions architect is designing an AWS account structure for multiple teams in the same region. The company needs a VPC connected to the on-premises network and expects less than 50 Mbps of total traffic. Which combination of steps will meet these requirements most cost-effectively? (Choose two.)

   • A.Deploy a CloudFormation template per account.
   • B.Deploy CloudFormation in a shared services account and share subnets using AWS RAM.(correct answer)
   • C.Use AWS Transit Gateway with Site-to-Site VPN.
   • D.Use AWS Site-to-Site VPN for connectivity.(correct answer)
   • E.Use AWS Direct Connect for connectivity.
   Show answer & explanationHide answer

   Correct answer: B, D

   Deploy CloudFormation in a shared services account and share subnets using AWS RAM. / Use AWS Site-to-Site VPN for connectivity.

   Explanation

   VPC sharing reduces operational overhead, and Site-to-Site VPN is the most cost-effective connectivity option for low bandwidth requirements.

5. Question 5.A research center has moved 1PB of object storage to an S3 bucket used by 100 scientists, each with a personal folder. All scientists are in a single IAM user group. The compliance officer needs to ensure scientists cannot access each other's work and requires reporting on all document access with minimal operational overhead. Which combination of actions should be taken? (Choose two.)

   • A.Use IAM policy with ${aws:username} condition for S3 path restriction.(correct answer)
   • B.Use CloudTrail to capture object-level events and store logs in S3 for Athena queries.(correct answer)
   • C.Enable S3 server access logging and analyze with Athena.
   • D.Use S3 bucket policy for group-wide access.
   • E.Send CloudTrail logs to CloudWatch and query via Athena connector.
   Show answer & explanationHide answer

   Correct answer: A, B

   Use IAM policy with ${aws:username} condition for S3 path restriction. / Use CloudTrail to capture object-level events and store logs in S3 for Athena queries.

   Explanation

   IAM policy with dynamic username ensures per-user isolation, while CloudTrail provides detailed audit logs for compliance reporting.

6. Question 6.A company is deploying a big data analytics cluster across many Linux EC2 instances in multiple Availability Zones. All nodes require read and write access to common, POSIX-compatible file storage that is highly available and can handle high throughput. Which storage solution will meet these requirements?

   • A.AWS Storage Gateway file gateway with S3.
   • B.Amazon EFS general-purpose mode.
   • C.Amazon EBS io2 volume shared across instances.
   • D.Amazon EFS max I/O performance mode.(correct answer)
   Show answer & explanationHide answer

   Correct answer: D

   Amazon EFS max I/O performance mode.

   Explanation

   Amazon EFS with Max I/O mode is designed for highly parallel, high-throughput workloads across multiple AZs.

7. Question 7.A company uses AWS Transfer Family with an S3 bucket to receive PGP-encrypted updates from a third-party supplier. They need to automatically decrypt the data upon receipt using a managed workflow. What should be done next?

   • A.Store public key in Secrets Manager and use nominal step for decryption.
   • B.Store private key and use exception handler for decryption.
   • C.Store private key and use nominal step for decryption.(correct answer)
   • D.Store public key and use exception handler for decryption.
   Show answer & explanationHide answer

   Correct answer: C

   Store private key and use nominal step for decryption.

   Explanation

   Private key is required for decryption, stored securely in Secrets Manager, and the nominal workflow step performs standard processing.

8. Question 8.An entertainment company's ticketing service runs on EC2 instances and uses a pricing file stored in S3. The file is updated every 1 to 15 minutes, but instances currently only download it at launch, leading to outdated pricing. What is the most cost-effective way to ensure instances always use the latest information?

   • A.Use Lambda + DynamoDB.
   • B.Use Lambda + EFS.
   • C.Mount S3 bucket using Mountpoint for Amazon S3.(correct answer)
   • D.Use EBS multi-attach volume.
   Show answer & explanationHide answer

   Correct answer: C

   Mount S3 bucket using Mountpoint for Amazon S3.

   Explanation

   Mountpoint for Amazon S3 allows real-time access to S3 data without replication or additional infrastructure.

9. Question 9.An application pulls an EFS file system for new files, selects a Docker image based on the file data, and runs the container for up to 2 hours. The company wants to eliminate EC2 instances and refactor to a more efficient model. Which solution meets these requirements?

   • A.ECS Fargate with EventBridge on EFS.
   • B.ECS Fargate with EFS event notifications.
   • C.Lambda + S3 event triggers + ECS Fargate.(correct answer)
   • D.Lambda container images only.
   Show answer & explanationHide answer

   Correct answer: C

   Lambda + S3 event triggers + ECS Fargate.

   Explanation

   S3 event notifications trigger Lambda, which then starts Fargate tasks suitable for long-running workloads.

10. Question 10.A ticketing platform runs on an ECS cluster (EC2 On-Demand instances) and frequently requests ticket assets from S3 via a NAT gateway. The company knows the exact date and time of traffic spikes for events. How can they optimize costs without decreasing availability? (Choose two.)

    • A.Create a gateway VPC endpoint for S3.(correct answer)
    • B.Add Spot capacity provider.
    • C.Create On-Demand Capacity Reservations.
    • D.Enable S3 Transfer Acceleration.
    • E.Use scheduled scaling policies.(correct answer)
    Show answer & explanationHide answer

    Correct answer: A, E

    Create a gateway VPC endpoint for S3. / Use scheduled scaling policies.

    Explanation

    Gateway VPC endpoint removes NAT costs for S3 traffic, and scheduled scaling ensures precise capacity alignment with known demand spikes.

11. Question 11.A company runs an application in the cloud that consists of a database and a website. Users can post data to the website, have the data processed, and have the data sent back to them in an email. Data is stored in a MySQL database running on an Amazon EC2 instance. The database is running in a VPC with two private subnets. The website is running on Apache Tomcat in a single EC2 instance in a different VPC with one public subnet. There is a single VPC peering connection between the database and website VPC. The website has suffered several outages during the last month due to high traffic. Which actions should a solutions architect take to increase the reliability of the application? (Choose three.)

    • A.Place the Tomcat server in an autoscaling group with multiple EC2 instances behind an application load balancer.(correct answer)
    • B.Provision an additional VPC peering connection.
    • C.Migrate the MySQL database to Amazon Aurora with one Aurora replica.(correct answer)
    • D.Provision two NAT gateways in the database VPC.
    • E.Move the Tomcat server to the database VPC.
    • F.Create an additional public subnet in a different availability zone in the website VPC.(correct answer)
    Show answer & explanationHide answer

    Correct answer: A, C, F

    Place the Tomcat server in an autoscaling group with multiple EC2 instances behind an application load balancer. / Migrate the MySQL database to Amazon Aurora with one Aurora replica. / Create an additional public subnet in a different availability zone in the website VPC.

    Explanation

    Improves high availability by introducing horizontal scaling with ALB and ASG, increasing database resilience using Aurora with replication, and enabling multi-AZ deployment for the web tier to eliminate single points of failure.

12. Question 12.A retail company is mounting IoT sensors in all of its stores worldwide. During manufacturing, each sensor receives an X.509 certificate issued by the company's private certificate authority (CA) containing a unique serial number. The company needs to ensure devices can only send data to AWS after installation. Which solution meets these requirements?

    • A.Use a Lambda pre-provisioning hook without CA registration.
    • B.Use Step Functions for validation during installation.
    • C.Use Lambda pre-provisioning hook with CA registration and allow auto registration.(correct answer)
    • D.Use fleet provisioning with claim certificates only.
    Show answer & explanationHide answer

    Correct answer: C

    Use Lambda pre-provisioning hook with CA registration and allow auto registration.

    Explanation

    AWS IoT Core Just-In-Time Provisioning (JITP) with CA registration and Lambda pre-provisioning validation ensures devices are only activated after proper validation when they first connect.

13. Question 13.A team of data scientists is using Amazon SageMaker in a VPC without internet access. They need occasional access to PyPI for Python packages while maintaining network isolation. Which solution meets these requirements?

    • A.Use AWS CodeCommit repositories for PyPI packages.
    • B.Use a NAT gateway with restricted NACL rules.
    • C.Use a NAT instance with firewall restrictions.
    • D.Use AWS CodeArtifact with an external connection to PyPI and a VPC endpoint.(correct answer)
    Show answer & explanationHide answer

    Correct answer: D

    Use AWS CodeArtifact with an external connection to PyPI and a VPC endpoint.

    Explanation

    AWS CodeArtifact provides a secure, private package repository with external PyPI integration and VPC endpoint access, allowing package retrieval without internet exposure.

14. Question 14.A company uses AWS Organizations and needs to move 540 developer accounts into a new developer organization. Which combination of steps should be taken? (Choose three.)

    • A.Use move account operation from old organization.
    • B.Remove accounts from old organization.(correct answer)
    • C.Remove accounts from within each member account.
    • D.Create placeholder accounts in new organization.
    • E.Invite accounts to new organization.(correct answer)
    • F.Users accept invitations from their accounts.(correct answer)
    Show answer & explanationHide answer

    Correct answer: B, E, F

    Remove accounts from old organization. / Invite accounts to new organization. / Users accept invitations from their accounts.

    Explanation

    Accounts must first be removed from the old organization, then invited to the new organization, and finally accepted by account owners to complete the migration.

15. Question 15.A travel company experiences heavy load spikes during quarterly content updates. The system uses EC2 instances, DynamoDB, and Redis. Which solution provides high availability and load handling?

    • A.DAX + Auto Scaling Group + ALB + Route 53 simple routing.(correct answer)
    • B.ElastiCache Redis + CloudFront + manual scaling.
    • C.Memcached + ALB + scheduled scaling.
    • D.DAX + CloudFront + manual scaling.
    Show answer & explanationHide answer

    Correct answer: A

    DAX + Auto Scaling Group + ALB + Route 53 simple routing.

    Explanation

    DAX improves DynamoDB performance, ALB with Auto Scaling ensures high availability, and scheduled scaling handles predictable traffic spikes efficiently.

16. Question 16.A security audit reveals that an Application Load Balancer is accepting requests from unauthenticated users. What is the best solution to ensure only authenticated users can access backend services?

    • A.Enable ALB authentication with OIDC identity provider.(correct answer)
    • B.Use CloudFront signed URLs.
    • C.Use AWS WAF to block unauthenticated requests.
    • D.Use CloudTrail and Lambda for reactive blocking.
    Show answer & explanationHide answer

    Correct answer: A

    Enable ALB authentication with OIDC identity provider.

    Explanation

    ALB supports native OIDC authentication integration, enabling secure login flows and ensuring only authenticated requests are forwarded to backend services.

17. Question 17.A company wants to allow developers to use AWS Marketplace Private Marketplace but restrict administration to a specific role. What is the most efficient solution?

    • A.Inline deny policies for all users.
    • B.Permissions boundary for all roles.
    • C.SCP restricting all except procurement-manager-role.(correct answer)
    • D.SCP applied only to shared accounts.
    Show answer & explanationHide answer

    Correct answer: C

    SCP restricting all except procurement-manager-role.

    Explanation

    Service Control Policies (SCPs) provide organization-wide guardrails, ensuring only the specified role can administer Private Marketplace.

18. Question 18.A company needs to separate product data and session data, with cross-region disaster recovery and high performance. Which solution meets these requirements?

    • A.RDS only with read replicas.
    • B.RDS + ElastiCache Memcached.
    • C.Two DynamoDB global tables.
    • D.RDS for product data and DynamoDB global table for session data.(correct answer)
    Show answer & explanationHide answer

    Correct answer: D

    RDS for product data and DynamoDB global table for session data.

    Explanation

    RDS is best for relational product data, while DynamoDB global tables provide high-performance, multi-region replication for session data.

19. Question 19.An EC2 cluster placement group returns an insufficient capacity error when launching new instances. What should be done?

    • A.Use spread placement group.
    • B.Stop and start all instances and retry launch.(correct answer)
    • C.Merge placement groups.
    • D.Use dedicated hosts.
    Show answer & explanationHide answer

    Correct answer: B

    Stop and start all instances and retry launch.

    Explanation

    Stopping and starting instances releases their placement, allowing AWS to reassign them across available racks with sufficient capacity.

20. Question 20.A media application using S3, Lambda, and DynamoDB fails under high upload traffic due to Lambda concurrency and DynamoDB write limits. Which actions improve performance and reliability? (Choose two.)

    • A.Increase DynamoDB RCUs.
    • B.Increase DynamoDB WCUs.(correct answer)
    • C.Add ElastiCache layer.
    • D.Add SQS queue between S3 and Lambda.(correct answer)
    • E.Use S3 Transfer Acceleration.
    Show answer & explanationHide answer

    Correct answer: B, D

    Increase DynamoDB WCUs. / Add SQS queue between S3 and Lambda.

    Explanation

    Increasing WCUs improves write throughput in DynamoDB, while SQS buffers incoming events to smooth Lambda invocation spikes and prevent concurrency throttling.

21. Question 21.A company is building a solution in the AWS cloud. Thousands of devices will connect to the solution and send data. Each device needs to be able to send and receive data in real time over the MQTT protocol. Each device must authenticate by using a unique X.509 certificate. Which solution will meet these requirements with the least operational overhead?

    • A.Set up AWS IoT Core for each device. Create a corresponding Amazon MQ and provision a certificate. Connect each device to Amazon MQ.
    • B.Create a network load balancer (NLB) and configure it with an AWS Lambda authorizer. Run an MQTT broker on Amazon EC2 instances in an Auto Scaling group. Set the Auto Scaling group as the target for the NLB. Connect each device to the NLB.
    • C.Set up AWS IoT Core for each device. Create a corresponding AWS IoT thing and provision a certificate. Connect each device to AWS IoT Core.(correct answer)
    • D.Set up an Amazon API Gateway HTTP API and a network load balancer (NLB). Create integration between API Gateway and the NLB. Configure a mutual TLS certificate authorizer on the HTTP API. Run an MQTT broker on an Amazon EC2 instance that the NLB targets. Connect each device to the NLB.
    Show answer & explanationHide answer

    Correct answer: C

    Set up AWS IoT Core for each device. Create a corresponding AWS IoT thing and provision a certificate. Connect each device to AWS IoT Core.

    Explanation

    AWS IoT Core is a fully managed MQTT broker with native support for X.509 certificates and device identity management, minimizing operational overhead.

22. Question 22.A utility company collects usage data every 5 minutes from smart meters. Data is sent to Amazon API Gateway, processed by an AWS Lambda function, and stored in an Amazon DynamoDB table. As more meters are deployed, Lambda functions are taking longer and there are throughput and throttling errors in Lambda and DynamoDB. Which combination of changes will resolve these issues? (Choose two.)

    • A.Increase the write capacity units (WCUs) to the DynamoDB table.(correct answer)
    • B.Increase the memory available to the Lambda functions.
    • C.Increase the payload size from the smart meters to send more data.
    • D.Stream the data into an Amazon Kinesis Data Stream from API Gateway and process the data in batches.(correct answer)
    • E.Collect data in an Amazon SQS FIFO queue which triggers a Lambda function to process each message.
    Show answer & explanationHide answer

    Correct answer: A, D

    Increase the write capacity units (WCUs) to the DynamoDB table. / Stream the data into an Amazon Kinesis Data Stream from API Gateway and process the data in batches.

    Explanation

    Increasing WCUs resolves DynamoDB write throttling, and using Kinesis introduces buffering and batching, reducing Lambda concurrency pressure and smoothing traffic spikes.

23. Question 23.A company has services in its on-premises data center connected to AWS via Direct Connect and VPN. Data is sensitive and must not traverse the public internet. The company wants to expose services to other companies using AWS. Which solution meets these requirements?

    • A.Create a VPC endpoint service behind a Network Load Balancer (NLB) and expose it over Direct Connect.(correct answer)
    • B.Create a VPC endpoint service behind an Application Load Balancer (ALB) and expose it over Direct Connect.
    • C.Attach an internet gateway to the VPC and configure security rules.
    • D.Attach a NAT gateway to the VPC and configure security rules.
    Show answer & explanationHide answer

    Correct answer: A

    Create a VPC endpoint service behind a Network Load Balancer (NLB) and expose it over Direct Connect.

    Explanation

    AWS PrivateLink with a Network Load Balancer enables private service exposure over AWS backbone and Direct Connect without using the public internet.

24. Question 24.A QA department needs to launch short-lived environments using a CloudFormation template. Users should be able to deploy environments without having permissions to directly create AWS resources. What solution meets these requirements?

    • A.Upload the template to S3 and allow users to assume a privileged role.
    • B.Create an AWS Service Catalog product with a launch constraint role and allow users to use Service Catalog APIs.(correct answer)
    • C.Upload the template to S3 and grant CloudFormation permissions with restrictions.
    • D.Use AWS Elastic Beanstalk and allow users to deploy environments via CLI.
    Show answer & explanationHide answer

    Correct answer: B

    Create an AWS Service Catalog product with a launch constraint role and allow users to use Service Catalog APIs.

    Explanation

    AWS Service Catalog enables controlled self-service provisioning using launch constraints, ensuring least privilege while allowing users to deploy predefined environments.

25. Question 25.A website uses CloudFront with a primary origin and a failover DR region. Failover currently takes more than one minute due to DNS TTL. What is the fastest failover solution?

    • A.Use multiple CloudFront distributions with Route 53 failover.
    • B.Reduce Route 53 TTL to 4 seconds.
    • C.Use latency-based routing for backend origins.
    • D.Use a CloudFront origin group with failover configured.(correct answer)
    Show answer & explanationHide answer

    Correct answer: D

    Use a CloudFront origin group with failover configured.

    Explanation

    CloudFront origin groups enable instant application-layer failover between origins, eliminating DNS-based delay.

26. Question 26.A company runs SQL queries on EMR using Presto only during specific hours. What is the most cost-effective solution?

    • A.Use Amazon Redshift Spectrum.
    • B.Use Amazon Athena with AWS Glue Data Catalog and store data in S3.(correct answer)
    • C.Use EMR with EMRFS.
    • D.Use Amazon Redshift.
    Show answer & explanationHide answer

    Correct answer: B

    Use Amazon Athena with AWS Glue Data Catalog and store data in S3.

    Explanation

    Amazon Athena is serverless and charges only per query, eliminating the cost of always-on EMR clusters.

27. Question 27.A company wants to enforce per-customer request quotas for a Lambda-based application, with varying limits per customer. Which solution meets this requirement?

    • A.Use API Gateway REST API with usage plans and API keys.(correct answer)
    • B.Use API Gateway HTTP API with usage plans.
    • C.Use Lambda aliases with concurrency limits.
    • D.Use ALB with AWS WAF rate-based rules.
    Show answer & explanationHide answer

    Correct answer: A

    Use API Gateway REST API with usage plans and API keys.

    Explanation

    API Gateway REST APIs support usage plans and API keys, enabling per-customer quota enforcement and throttling.

28. Question 28.A financial company needs to inspect all VPC traffic in real time using a third-party security tool without affecting performance. Which combination of steps should be used? (Choose two.)

    • A.Deploy security tool on EC2 instances in an Auto Scaling group.(correct answer)
    • B.Deploy the application behind a Network Load Balancer.
    • C.Deploy an Application Load Balancer in front of security tools.
    • D.Use a Gateway Load Balancer to redirect traffic to security appliances.(correct answer)
    • E.Use a Transit Gateway for routing traffic.
    Show answer & explanationHide answer

    Correct answer: A, D

    Deploy security tool on EC2 instances in an Auto Scaling group. / Use a Gateway Load Balancer to redirect traffic to security appliances.

    Explanation

    Gateway Load Balancer enables transparent traffic inspection using third-party appliances deployed on EC2 with scalable, inline traffic redirection.

29. Question 29.An ECS Fargate application with Aurora MySQL must support cross-region disaster recovery with no data loss and minimal operational overhead. What should be used?

    • A.Aurora cross-region replica(correct answer)
    • B.AWS DataSync
    • C.AWS DMS continuous replication
    • D.Automated snapshots every 5 minutes
    Show answer & explanationHide answer

    Correct answer: A

    Aurora cross-region replica

    Explanation

    Aurora Global Database provides managed cross-region replication with very low RPO and minimal operational overhead.

30. Question 30.A company needs a hybrid DNS solution where on-premises systems resolve Route 53 private hosted zones and all VPCs also resolve the same domain. What is the highest performance architecture?

    • A.Associate private hosted zone with all VPCs and use Route 53 inbound resolver for on-premises.(correct answer)
    • B.Use EC2 conditional forwarders for DNS.
    • C.Use Route 53 outbound resolver.
    • D.Associate private hosted zone only with shared services VPC and use inbound resolver.
    Show answer & explanationHide answer

    Correct answer: A

    Associate private hosted zone with all VPCs and use Route 53 inbound resolver for on-premises.

    Explanation

    Direct association of private hosted zones with all VPCs ensures native resolution, while Route 53 inbound resolver enables efficient on-premises DNS resolution.

Frequently Asked Questions

Keep studying

Full exam

AWS Solutions Architect Professional (SAP-C02) details

Free practice

AWS SAA-C03

Free practice

AWS SCS-C02

Free practice

AWS ANS-C01