Skip to content
AWSVerified and updated

AWS Certified Solutions Architect - Professional SAP-C02

100 real AWS SAP-C02 questions with answers checked by certified engineers. Start free, upgrade when you are ready.

See 2 free PDFs
Questions
100
Exam code
SAP-C02
Last updated
Oct 8, 2026
Language
English
Certification
AWS Certified Solutions Architect - Professional
Free, no account needed

Try SAP-C02 free

Open a PDF shared by candidates who sat the exam, or answer questions in the online test engine.

Free files are partial. Full access has all 100 questions.

Free online test engine

Practise SAP-C02 questions in your browser and see how the real exam is set out.

Start the free test
Free preview

SAP-C02 sample questions

2 questions from the SAP-C02 practice set, with the answer and explanation.

  1. Question 1
    A company runs 40 AWS accounts under AWS Organizations. The security team must guarantee that no member account can disable AWS CloudTrail, even when an account administrator holds full IAM permissions. Which approach meets this requirement?
    • A.
      Create an IAM permissions boundary in each account that denies CloudTrail changes to all roles
    • B.
      Enable AWS Config rules in every account to detect CloudTrail changes
    • C.
      Attach a service control policy that denies CloudTrail changes to the organization root
    • D.
      Remove the IAM administrator role from all member accounts
    Show answer

    Correct answer:

    • C.
      Attach a service control policy that denies CloudTrail changes to the organization root

    Explanation

    Service control policies set the maximum permissions for member accounts, and they bind account root users and IAM administrators, so a local IAM policy cannot override them. A permissions boundary is managed by people with IAM rights inside each account, so it does not enforce the guarantee centrally. AWS Config rules detect configuration drift after the fact and do not block the API call.
  2. Question 2
    AWS Control Tower guardrails include preventive guardrails implemented as service control policies and detective guardrails implemented as AWS Config rules.
    • A.
      True
    • B.
      False
    Show answer

    Correct answer:

    • A.
      True

    Explanation

    Control Tower preventive guardrails are service control policies that stop a disallowed action, while detective guardrails are AWS Config rules that report noncompliant resources. Both types are applied to the member accounts that the landing zone governs. The statement is therefore true.
Exam detail

About AWS SAP-C02

Related Practice Questions

We help aspirants prepare for the AWS certification exam without spending money on preparation materials. Many candidates download the SAP-C02 AWS Certified Solutions Architect - Professional practice questions PDF here. You can easily download AWS SAP-C02 PDF practice questions for free. If you have any questions about the exam product, you can view the comments. You can also publish comments about SAP-C02 exam questions in PDF format.
FAQ

SAP-C02 FAQ

What is the AWS SAP-C02 exam?

SAP-C02 is the AWS Certified Solutions Architect - Professional exam.

How many questions are in the SAP-C02 practice set?

The full SAP-C02 practice set has 100 questions with answers.

Can I try SAP-C02 practice questions for free?

Yes. This page has 2 free SAP-C02 PDF files shared by other candidates, and a free online test engine where you can answer SAP-C02 questions in your browser. No account is needed.

What formats are the SAP-C02 practice questions available in?

SAP-C02 practice questions are available in these formats: PDF and Online Practice Exam. You can also get them together in a bundle.

How much does SAP-C02 practice material cost?

SAP-C02 practice material starts from $59 USD.

Are these the actual SAP-C02 exam questions?

No. They are exam-style practice questions written from the official SAP-C02 exam objectives, not actual exam content.

Reviews and Discussion

Loading comments