SAP-C02 Q73 · Serverless

Question

A company is building a solution in the AWS Cloud. Thousands or devices will connect to the solution and send data. Each device needs to be able to send and receive data in real time over the MQTT protocol. Each device must authenticate by using a unique X.509 certificate. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Option C: AWS IoT Core with IoT things and X.509 certificates** perfectly addresses every requirement:

1. **MQTT Protocol**: AWS IoT Core natively supports MQTT (versions 3.1.1 and 5.0) as a first-class protocol. No additional broker setup needed — it IS the broker.

2. **X.509 Certificate Authentication**: AWS IoT Core has built-in support for X.509 certificate-based mutual TLS authentication. Each device gets its own certificate, which is registered with IoT Core and attached to an IoT thing.

3. **Real-time bidirectional communication**: IoT Core's message broker supports publish/subscribe patterns, allowing devices to both send and receive data in real time.

4. **Thousands of devices**: IoT Core is a fully managed, serverless service that automatically scales to support millions of

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips