Question 600
A migration program already uses DataSync every night to copy SMB files from a factory share to EFS and has configured post-transfer integrity verification. Auditors now demand downloadable evidence identifying which individual files were transferred, skipped, verified or rejected in each task execution, including verification errors and supported checksums, without writing a custom file-crawler. What should be configured?
- Enable DataSync standard task reports with appropriate per-file detail and a controlled S3 report destination, then inspect verified and failed files after each run.
- Inspect only DataSync aggregate bytes-transferred CloudWatch metrics and infer which exact source files were verified or skipped from that aggregate.
- Enable DataSync CloudWatch Logs basic level only and assume it always includes a downloadable structured transferred/skipped/verified report for every file.
- Disable file verification in DataSync and use a single successful task-level status to assert every file is byte-for-byte correct.
Explanation
Correct Answer
A:DataSync task reports can enumerate attempted transferred, skipped, verified and deleted items and report verification outcomes, with supported file checksum details.
Incorrect Answers
B:Aggregate task metrics do not provide per-path outcomes, checksum fields and failure reasons required for auditable file-level evidence.
C:Logs can aid troubleshooting but the specifically structured per-file success/error task reports must be configured to meet the requirement.
D:A successful top-level transfer is not per-file verification evidence, and disabling verification weakens auditability.
Question 601
A bank has already configured Transfer Family SFTP for partner deposits into S3. It must automatically quarantine newly received files, invoke a custom validation Lambda, and only then move approved files into a downstream processing prefix, while retaining a workflow status. Which addition fits the existing transfer endpoint?
- Use an AWS Transfer Family managed workflow with suitable copy, custom Lambda validation, and S3 operations after the file lands, with service-role permissions and failure tracking.
- Configure a Transfer Family SFTP connector for outbound polling of an external vendor, although the bank already receives uploads on its own inbound endpoint.
- Use an S3 replication rule to copy every object to a clean prefix before checking file content with the stated Lambda validator.
- Replace the identity provider with anonymous login and treat incoming files as verified by default.
Explanation
Correct Answer
A:Transfer Family managed workflows can orchestrate supported post-upload steps, including invoking Lambda for custom processing, while preserving existing managed SFTP delivery.
Incorrect Answers
B:SFTP connectors retrieve/send files against remote servers; the case requires processing deposits after an existing inbound SFTP server receives them.
C:Replication does not perform the required content validation and approve/reject workflow decision before downstream promotion.
D:Anonymous access undermines auditability and cannot replace validation of untrusted partner content.
Question 602
A factory uses an existing S3 File Gateway NFS share to access a bucket. A cloud data pipeline writes updated files directly into the S3 bucket, bypassing the gateway; on-premises clients continue seeing the old directory inventory. They cannot wait for the next manual restart. What gateway operation restores visibility of the changed objects?
- Increase File Gateway cache disk capacity alone while keeping the stale metadata cache unchanged after external writes to the backing bucket.
- Issue a supported Storage Gateway RefreshCache for the relevant file share and changed prefixes, then wait for the asynchronous refresh-complete notification before checking visibility.
- Run an S3 replication rule into the same backing bucket and assume the gateway automatically discovers the newly written keys immediately.
- Create an unrelated S3 gateway VPC endpoint and assume it invalidates all on-premises File Gateway caches.
Explanation
Correct Answer
B:RefreshCache updates the gateway’s cached object inventory so external S3 additions, replacements and removals become visible; completion is asynchronous and may require notification.
Incorrect Answers
A:Adding cache size may help local reads but does not automatically refresh the namespace metadata after out-of-band S3 object updates.
C:Object replication does not invoke File Gateway metadata refresh or force the client-visible inventory to reflect outside updates.
D:VPC S3 endpoint routing does not issue the required Storage Gateway cache inventory refresh.
Question 603
A team has already created the AWS DMS full-load-plus-CDC task to move an on-premises MySQL database to RDS for MySQL. Initial load succeeds, but source writes made after the migration begins are not reliably replicated. A source audit finds binary logging disabled on some servers and binlog_format=STATEMENT with binlog_row_image=MINIMAL on others. Which source-side prerequisite should be corrected before revalidating CDC?
- Change only the DMS target endpoint subnet and assume MySQL statement-based binary logs become row images automatically.
- Enable and retain source MySQL binary logs, configure binlog_format=ROW and binlog_row_image=FULL for supported DMS CDC, and restart affected sessions as required.
- Run a fresh DMS full load every minute without enabling source logs, assuming it is a substitute for ordered transaction change capture.
- Enable DMS target-table preparation DROP_AND_CREATE alone, which supplies missing source log events even after DMS task creation.
Explanation
Correct Answer
B:AWS DMS MySQL CDC depends on enabled binary logging with supported row-based format and full row images; source-session and retention settings must be validated before reliable change capture.
Incorrect Answers
A:Moving a target network endpoint does not generate missing source transaction information or convert statement-based logs to supported row events.
C:Repeated full copies can overwrite or race live writes and do not provide the requested continuous log-based transaction replication.
D:Target preparation governs how target tables are initialized, not whether source binlog rows exist for the CDC reader.
Question 604
A data platform must relocate SQL Server backup files from an on-premises data center to S3 nightly with high integrity. Its connection is reliable, and files are large but it does not need a full database CDC migration. Which transfer service matches?
- Use DMS homogeneous data migration to copy SQL Server full-backup files through an unsupported SMB source endpoint as if the backup files were database tables.
- Ship a new Snow device each night despite adequate network capacity and required online scheduling.
- Use AWS DataSync with an approved SMB or NFS source to S3 destination and scheduled verification.
- Use S3 Replication between two AWS buckets to pull files from an on-premises SMB server that has not uploaded them.
Explanation
Correct Answer
C:DataSync handles managed recurring file transfers with supported integrity checks and incremental changes without inventing database CDC.
Incorrect Answers
A:DMS database endpoints and CDC do not directly act as an SMB-to-S3 bulk backup-file transfer service.
B:Physical logistics are generally less suitable than network-based scheduled incremental file transport in this scenario.
D:S3 Replication handles eligible existing objects and cannot by itself read the original on-premises file share.
Question 605
A company starting a new migration program in November 2026 has application inventory exports, partially known dependencies, and multiple on-premises VMware groups. The team needs a managed collaborative planning workflow to group applications into move groups and staged waves, taking business criticality and discovered dependencies into account. It is NOT a preexisting AWS Migration Hub customer. Which currently available AWS capability should it evaluate?
- Enable a new AWS Migration Hub project as a first-time customer and assume Migration Hub continues onboarding all new customers after November 7, 2025.
- Use MGN replication-agent status pages alone to derive every business dependency and approve migration wave sequencing without inventory analysis.
- Use AWS Transform discovery and migration-planning jobs to analyze the inventory, build dependency-aware move groups and revise prioritized migration waves.
- Configure AWS DMS full-load task settings as the sole application portfolio planner, even for VM and network dependencies.
Explanation
Correct Answer
C:AWS Transform supports discovered inventory, dependency review, move groups and collaboratively refined migration waves, and is the recommended successor for new migration planning customers.
Incorrect Answers
A:AWS Migration Hub stopped accepting new customers November 7, 2025, so beginning a new Migration Hub project is ineligible for this explicitly new customer.
B:MGN replication health is important after server enrollment but cannot replace portfolio discovery, grouping and business-aware migration wave planning.
D:DMS is a database data-transfer service, not the cross-application migration wave planning and dependency review requested.
Question 606
A company runs a regulated legacy VM on premises and wants to create an EC2 image from an approved exported virtual disk once, without ongoing block replication or a managed migration wave. Which AWS migration approach should it review?
- Use AWS Application Migration Service with ongoing block replication and a cutover wave despite the request for a single import from an exported disk.
- Use S3 Bucket Replication to make every existing VMware VMDK bootable on EC2 without any import validation.
- Evaluate EC2 VM Import/Export for supported disk formats and operating systems, validating licensing and image compatibility.
- Use import-snapshot for the entire bootable guest operating system but assume it automatically registers a runnable EC2 AMI without an import-image workflow.
Explanation
Correct Answer
C:VM Import/Export can turn supported exported virtual machine images into AWS machine images for bounded import scenarios.
Incorrect Answers
A:MGN provides continuous rehosting but adds agent replication and migration lifecycle not needed for one supported exported-disk import.
B:Object replication copies bytes but does not convert disk packaging, drivers or supported guest OS settings into an AMI.
D:An imported EBS snapshot is not by itself a complete registered EC2 machine image with the necessary boot configuration.
Question 607
An AWS DMS task migrates a production MySQL table to Amazon RDS while customer updates continue on the source. Full load finishes but records written since the load started have not appeared on the target. What task setting addresses the gap?
- Enable DMS full-load-only mode and extend the source MySQL binlog retention, assuming retention makes an omitted CDC phase execute automatically.
- Configure and verify DMS full-load plus change data capture with usable source binary logs and a monitored replication checkpoint.
- Run a one-time full load only and declare that a completed initial copy also includes all subsequent source writes.
- Enable validation only after the initial copy without configuring CDC, assuming row comparison causes source writes to be replayed.
Explanation
Correct Answer
B:CDC follows ongoing source transactions after the initial copy and allows controlled low-downtime synchronization.
Incorrect Answers
A:Log retention is necessary for CDC, but a task configured for only full load will not consume ongoing binary-log changes.
C:A full load is a snapshot-style transfer and does not inherently replicate transactions that occur afterward.
D:Validation detects discrepancies; it does not substitute for configuring ongoing change replication.
Question 608
A heterogeneous database migration uses AWS DMS and AWS SCT. After schema conversion, the team discovers custom stored procedures with unsupported language constructs. It is considering starting CDC anyway. What is the correct migration decision?
- Enable full-load-and-CDC DMS execution first and assume unsupported Oracle stored procedure code is automatically translated during row replication.
- Change only the SCT target compatibility mode without reviewing manually flagged procedural logic or retesting its business behavior.
- Remove every stored procedure without validating its business use and immediately promote the target database.
- Review the SCT conversion assessment and manually redesign unsupported procedural logic before functional cutover tests.
Explanation
Correct Answer
D:SCT cannot automatically translate every database-specific procedure, so incompatible business logic must be addressed explicitly.
Incorrect Answers
A:DMS captures supported data changes, not arbitrary incompatible procedural code transformations.
B:A configuration change cannot guarantee unsupported procedure constructs have been ported correctly.
C:Deleting active application logic without replacement risks broken transactions and incorrect results.
Question 609
An AWS DMS source and target are reachable, and replication seems complete, but compliance requires evidence that migrated values match the source after full load and throughout CDC. Which DMS capability should the migration plan use?
- Rely on DMS task state Completed or Replication ongoing and treat those statuses as a proof of every row and column value matching.
- Compare only counts of source and destination table rows while ignoring field-content mismatches and late CDC updates.
- Enable supported DMS data validation and reconcile discrepancies and validation statistics before accepting the cutover.
- Use only a successful TCP connection test as proof that every source database value was migrated correctly.
Explanation
Correct Answer
C:DMS validation can compare eligible source and target rows and identify mismatches that transfer completion alone does not prove absent.
Incorrect Answers
A:Transfer progress does not guarantee target data parity; the migration needs actual data validation and discrepancy results.
B:Equal row counts can coexist with changed or incorrect column values and are not equivalent to DMS row validation.
D:Network connectivity tests establish reachability but cannot verify individual migrated records.
Question 610
An MGN migration continuously replicates application server disks to AWS. The team wants to rehearse whether migrated servers boot, attach expected networks and reach dependencies before a production cutover. Which MGN step should be used?
- Execute an MGN cutover launch straight into production before performing any test launch against supported replicated server state.
- Inspect only MGN Replication healthy and declare the operating system, application services and DNS dependencies validated.
- Disable replication synchronization before testing and treat stale blocks as a complete recovery state.
- Launch supported non-disruptive test instances from replicated data and validate application dependencies and cutover runbook.
Explanation
Correct Answer
D:Test launches provide evidence of server operability in AWS while source production continues running.
Incorrect Answers
A:A production cutover cannot substitute for controlled boot, network and dependency evidence gathered during non-disruptive test launches.
B:Replication health measures source block synchronization, not successful boot and application-level functionality on the target.
C:Unverified stale replicated data can cause target correctness failures during cutover.
AWS Certified Solutions Architect - Professional SAP-C02 Practice Tests