November 16, 2026 is the last day to sit SAP-C02. This material targets SAP-C02, not SAP-C03.
See the full timelineValidate your advanced technical skills in designing optimized AWS solutions based on the AWS Well-Architected Framework. This exam covers organizational complexity, new solution design, continuous improvement, and workload migration.
No sign-up — instant feedback after every question
Get instant feedback after each question. See explanations and track your progress as you learn.
Timed session with no feedback until the end. Experience real exam conditions and test your knowledge.
10 questions · pick a topic · 5 minutes · shareable
Every in-scope AWS service, architectural pattern, and migration decision the SAP-C02 exam actually tests — organised by the four exam domains, not alphabetically
The AWS Certified Solutions Architect Professional (SAP-C02) is one of the most challenging and respected AWS certifications. It validates your advanced ability to design complex, multi-tier applications, implement enterprise-wide strategies, and migrate workloads to AWS. This is a significant step up from the Associate level.
This exam is for experienced cloud architects with two or more years of hands-on experience designing and deploying cloud architecture on AWS. You should already hold the Solutions Architect Associate certification or have equivalent experience. It's targeted at senior architects, lead engineers, and technical decision-makers.
Read the full AWS Solutions Architect Professional certification guide
The SAP-C02 exam has 75 questions (65 scored, 10 unscored) with multiple-choice and multiple-response questions. You have 180 minutes (3 hours), and the passing score is 750/1000 (approximately 75%). The exam fee is $300 USD. Questions are notably longer and more complex than the Associate level.
Recommended experience: Two or more years of hands-on experience designing and deploying cloud architecture on AWS, plus familiarity with AWS CLI, CloudFormation, and the AWS Well-Architected Framework.
Written in the style of the real exam. Answer each one, then open the answer to check.
Question 1 · Design Solutions for Organizational Complexity
A company has 120 AWS accounts in an organization in AWS Organizations and adds new accounts every month. Application teams create their own VPCs in several AWS Regions. The network team recently found overlapping CIDR blocks that prevent several VPCs from being attached to the company's transit gateways. The network team must ensure that every new VPC in every account and Region receives a non-overlapping CIDR block from approved ranges. The team also needs a central view of IP address usage. Which solution will meet these requirements with the LEAST ongoing manual effort?
Answer: C
Option C is correct: IPAM integrates with AWS Organizations through a delegated administrator, allocates CIDR blocks from pools so that allocations do not overlap, enforces allocation rules, shares pools with accounts through AWS RAM, and monitors IP address usage centrally. Option A relies on people using a form and only reports overlaps after the fact. Option B detects overlaps only after VPCs exist, and deleting VPCs automatically is disruptive rather than preventive. Option D depends on a manually maintained spreadsheet, and a tag value does not control which CIDR block the VPC actually uses.
Sources: AWS documentation 1, AWS documentation 2, AWS documentation 3
Question 2 · Design for New Solutions
A software company is designing a new SaaS product that runs on Amazon EC2 instances in the company's VPC. Customers will consume the product from VPCs in their own AWS accounts. Many customer VPCs use CIDR blocks that overlap with each other and with the company's VPC. Traffic must stay on the AWS network, only customers may initiate connections, and the company must not gain network access to customer VPCs. The company expects to onboard hundreds of customers. Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)
Answers: B, E
Options B and E are correct: AWS PrivateLink exposes a service behind a Network Load Balancer as a VPC endpoint service, and consumers connect through interface VPC endpoints in their own VPCs. Traffic stays on the AWS network, overlapping CIDR blocks do not matter, connections are one-way from consumer to provider, and the provider gets no route into consumer VPCs. Option A fails because VPC peering does not support overlapping CIDR blocks and opens two-way routing. Option C also requires non-overlapping routes and gives the company a network path into customer VPCs. Option D sends traffic over the internet.
Sources: AWS documentation 1, AWS documentation 2
Question 3 · Continuous Improvement for Existing Solutions
A media company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB) in us-east-1. Users around the world upload video files of up to 4 GB through the application, which receives each file and then writes it to an Amazon S3 bucket. Uploads from Asia and Europe are slow and often fail, and the EC2 fleet is overprovisioned to handle upload traffic. The company wants to make uploads faster and more reliable and to reduce the load on the EC2 instances. The company does not want to deploy infrastructure in additional AWS Regions. Which solution will meet these requirements?
Answer: D
Option D is correct: presigned URLs let clients upload directly to S3 so the files no longer pass through the EC2 instances, multipart upload lets failed parts be retried without restarting a 4 GB upload, and Transfer Acceleration routes uploads through edge locations over the AWS backbone for distant users. Option A improves the network path but every file still flows through the EC2 fleet. Option B also keeps the EC2 instances in the data path and adds cost. Option C requires buckets in more Regions and still routes uploads through the application.
Sources: AWS documentation 1, AWS documentation 2, AWS documentation 3
These sample questions are not part of the SAP-C02 practice exam, so you won't meet them again when you take it.
This practice exam has 75 questions, and exam mode gives you 180 minutes to answer them. The real SAP-C02 exam has 75 questions (65 scored and 10 unscored) in 180 minutes, so a full attempt here is the same length. Practice mode has no timer.
In format, yes: questions are multiple choice (one correct answer) or multiple response (two or more), spread across the 4 exam domains in close to the weights the official exam guide gives them. Scoring differs: AWS reports a scaled score from 100 to 1,000 and you pass at 750, while this practice exam shows the raw percentage you got right. For how hard the exam is, whether it is worth it and how long to study, read our AWS Solutions Architect Professional certification guide.
Aim for 80% or more, consistently, on full-length attempts in exam mode, not just once. That leaves a margin over the 750 out of 1,000 you need on the real SAP-C02 exam, whose questions will all be new to you. Repeat attempts here show the same questions, so judge yourself by first attempts and by whether you can explain each answer. No practice score guarantees a pass.
No. The SAP-C02 practice exam is free and needs no account. Your progress and score history are saved in this browser, so they stay on this device and are lost if you clear your browser data.
Start in practice mode, which tells you after each question whether you were right and explains the answer. When you score well there, switch to exam mode: 180 minutes and no feedback until the end, like test day. Your results break the score down by domain, so you can see which domains to study before your next attempt.
Affiliate links — if you enrol through them, CloudNinja may earn a commission at no extra cost to you.
Studying for more than one certification? All our practice tests are free.