SAP-C02 · LESSON 4
Accelerate Workload Migration and Modernization20% · 4 topics
Learn to select migration candidates, choose migration approaches and new architectures, and identify modernization opportunities.
4.1Select existing workloads and processes for potential migration
4.1 Select existing workloads and processes for potential migration.
Concept
To select migration candidates, first understand the current state. Collect server configuration, utilization and dependencies with AWS Application Discovery Service (agent-based or agentless), and track progress centrally with Migration Hub. Group strongly dependent servers into the same migration group (wave), and order waves by business priority and risk.
How it works / steps
- Collect server information and network dependencies with Discovery Service
- Group servers by application
- Prioritize by business value, complexity and risk
- Plan migration waves considering dependencies
- Track progress with Migration Hub
Workplace example
Dependency visualization shows the order system and inventory DB communicate heavily, so migrate both in the same wave to avoid latency problems.
Common confusions and exam tips
- Agentless discovery (for VMware) cannot collect detailed process information
- Splitting dependencies apart causes latency from traffic back to on-premises after migration
- Gain experience on low-complexity systems first
Mini quiz
Q1. For migration planning, you want to collect configuration and utilization of 500 VMs on on-premises VMware without installing agents on each server. Which method is most appropriate?
- Create only a cost estimate with the Migration Evaluator collector
- Collect each server's configuration with Systems Manager Inventory
- Install the Application Discovery Service agent on every server
- Connect the Application Discovery Service agentless collector to vCenter
Show answer and explanation
Answer: D Connect the Application Discovery Service agentless collector to vCenter
The agentless approach of Application Discovery Service collects VM configuration and utilization from vCenter. Use agents if you need detailed process and network dependencies. [Other options] Agents break the no-agent condition. A cost estimate alone lacks the configuration and utilization needed. Systems Manager Inventory needs an agent on each server.
Q2. You are planning the migration of hundreds of apps in waves. Which approach is most appropriate?
- Migrate all servers at once on the same weekend, finishing in one go without waves
- Divide waves in order of server name and proceed mechanically without regard to dependencies
- Move the most important and complex core system in the first wave to tackle the hardest part while experience is still low
- Group strongly dependent servers in the same wave, and move low-risk apps first to solidify the procedure
Show answer and explanation
Answer: D Group strongly dependent servers in the same wave, and move low-risk apps first to solidify the procedure
Splitting dependencies increases traffic between on-premises and the cloud, making performance and failure problems more likely. Start small, establish procedures, then scale up.
Reference links
4.2Determine the optimal migration approach for existing workloads
4.2 Determine the optimal migration approach for existing workloads.
Concept
Choose a migration strategy (the 7 Rs: rehost, replatform, refactor, repurchase, retire, retain, relocate) and decide on tools. Rehost servers with AWS Application Migration Service (MGN: continuous block-level replication with short cutover), databases with AWS DMS (full load and CDC for minimal downtime) and Schema Conversion, files with DataSync, and large data over thin networks with Snowball Edge.
How it works / steps
- Decide a 7 Rs strategy for each workload
- Replicate servers with MGN and cut over after test launches
- For DBs, sync changes with DMS CDC after a full load, and cut over with a short outage
- When moving to a different DB engine, also convert the schema
- Decide online or offline (Snowball) from line bandwidth and deadline
Workplace example
100 TB of files must be moved in one week over a 1 Gbps line (the line cannot make it), so ship the initial copy with Snowball Edge and sync changes with DataSync.
Common confusions and exam tips
- With DMS CDC, the source DB can stay in use until cutover
- MGN replicates continuously, so cutover downtime is short
- Bandwidth math: 100 TB over 1 Gbps takes about 9 days or more
Mini quiz
Q1. During migration with DMS, CDC latency keeps increasing and cannot catch up. What is the most appropriate next step?
- Switch LOB columns to full LOB mode to prevent missing data
- Enlarge the target DB instance to speed up writes
- Restart the task from full load to reset the CDC start position
- Check the replication instance's CPU, memory and more, and move to a larger class if needed
Show answer and explanation
Answer: D Check the replication instance's CPU, memory and more, and move to a larger class if needed
CDC latency can be caused by insufficient replication instance resources, target write performance, task settings and so on. Identify the cause with metrics and address it. [Other options] Restarting takes time without finding the cause. Target performance can also be a cause, but check metrics first. Full LOB mode tends to be slower.
Q2. Which statement about AWS Snowball Edge is incorrect?
- Data on the device is not encrypted, so users must protect data in transit by other means
- Data written to the device is imported into S3 after it arrives at AWS
- Large amounts of data that would take too long over the network can be migrated by physically shipping a device
- It also has features usable for data processing (compute) at the edge
Show answer and explanation
Answer: A Data on the device is not encrypted, so users must protect data in transit by other means
Data written to Snowball Edge is automatically encrypted with keys managed in KMS, and the device has tamper-resistant mechanisms.
Reference links
4.3Determine a new architecture for existing workloads
4.3 Determine a new architecture for existing workloads.
Concept
For the target architecture, choose compute (EC2, containers, serverless), storage (EBS, EFS, FSx, S3), databases (RDS, Aurora, DynamoDB, purpose-built DBs), networking and authentication from requirements. Also consider FSx for Windows File Server for Windows file shares, commercial DB licensing constraints and Active Directory integration (AWS Managed Microsoft AD).
How it works / steps
- Organize current functional, performance and licensing requirements
- Choose parts that can be replaced with managed services (DB, files, AD)
- Decide license-included or BYOL (Dedicated Hosts) from license terms
- Design networking and authentication for the period of coexistence with on-premises
- Design post-migration operations (monitoring, backup)
Workplace example
Move Windows file servers to FSx for Windows File Server, and integrate Active Directory through a trust between AWS Managed Microsoft AD and on-premises AD.
Common confusions and exam tips
- Even after rehosting, there is room to replace parts with managed services
- Check cloud terms for commercial DB licenses
- NFS (Linux) means EFS; SMB (Windows) means FSx for Windows
Mini quiz
Q1. The investigation found that apps being migrated depend on on-premises Active Directory authentication. AD will stay on-premises for now. What is the most appropriate next step?
- Create a trust between AWS Managed Microsoft AD and on-premises AD, or relay with AD Connector
- Sync on-premises AD users to IAM users with IAM Identity Center
- Move AD users to an Amazon Cognito user pool
- Create Simple AD and import on-premises AD users
Show answer and explanation
Answer: A Create a trust between AWS Managed Microsoft AD and on-premises AD, or relay with AD Connector
With Directory Service, establish a trust between AD on AWS and on-premises AD, or relay authentication to on-premises AD with AD Connector. [Other options] Identity Center manages sign-in to AWS and doesn't replace the app's AD authentication. Simple AD can't trust on-premises AD. Cognito can't run AD-dependent apps as is.
Q2. You are choosing the runtime environment for an app being migrated. The app needs specific kernel modules and a license management agent and requires fine-grained control of the OS. Which is the most suitable?
- AWS Elastic Beanstalk
- AWS Lambda
- Amazon EC2
- Amazon ECS on AWS Fargate
Show answer and explanation
Answer: C Amazon EC2
EC2 gives OS administrator access, so apps needing special drivers or agents can run. In exchange, users handle operations such as patching.
Reference links
4.4Determine opportunities for modernization and enhancements
4.4 Determine opportunities for modernization and enhancements.
Concept
Modernization makes migrated systems cloud-native to improve agility and cost. Options include splitting monoliths into microservices (the strangler fig pattern), containerizing (ECS, EKS, Fargate), going serverless (Lambda, Step Functions, EventBridge), moving from commercial DBs to open source or Aurora, and adopting purpose-built DBs.
How it works / steps
- Identify parts with the biggest operational burden, change frequency or cost issues
- Carve out functions gradually with the strangler fig pattern
- Reduce operational effort by containerizing or going serverless
- Move commercial DBs to Aurora or similar to lower license costs
- Measure the effect (deployment frequency, cost)
Workplace example
From a monolithic e-commerce site, first carve out product search into API Gateway and Lambda, route to it by ALB path, and migrate gradually while leaving the rest of the monolith unchanged.
Common confusions and exam tips
- Rebuilding everything at once increases risk and duration
- Microservices require designing data separation and operational monitoring
- Purpose-built DBs fit each job, but more types make operations more complex
Mini quiz
Q1. You decided to gradually move a monolithic order system to microservices. What is the most appropriate first step?
- Install every tool needed for microservices so they are available even with no planned use
- Split the monolith's database by every function first and make all app changes together at the end
- Rebuild all functions as microservices at once and switch everything over when complete
- Pick one low-impact function, carve it out as a new service and route to it by ALB path
Show answer and explanation
Answer: D Pick one low-impact function, carve it out as a new service and route to it by ALB path
Carve out something small, confirm the effect and operating procedures, then expand scope (strangler fig). Rebuilding everything at once is high risk.
Q2. You are considering AWS Lambda as a migration target. Which statement about Lambda is incorrect?
- It runs code triggered by events and charges by execution time and number of requests
- A single invocation can run for any number of hours, making it ideal for batch jobs that take several hours
- Functions can also be deployed as container images
- Concurrency scales automatically with load
Show answer and explanation
Answer: B A single invocation can run for any number of hours, making it ideal for batch jobs that take several hours
A single Lambda invocation runs for at most 15 minutes. For long processing, split it with Step Functions or use Fargate, AWS Batch and so on.
Reference links
Lessons are written by this site based on public information and do not guarantee exam content. Product specifications change, so check the latest information at the reference links.
Notes (unofficial, original questions, no pass guarantee)
- The questions on this site are original practice questions written by this site based on publicly available skills outlines and exam guides. They are not actual exam questions.
- Amazon Web Services, AWS and related marks are trademarks of Amazon.com, Inc. or its affiliates. This site is not affiliated with or endorsed by AWS.
- This content is a study aid and does not guarantee a pass. Exam content, format and prerequisites may change without notice; always check the latest information on the official page before taking the exam.
- Your accuracy on the mock exam cannot be converted to the official (scaled) score and does not predict a pass or fail.
- Progress is saved only in this browser (localStorage) unless you sign in with Google to sync it. You can delete it from the Cookie & storage settings page (Japanese).