ExpertAWS Solutions Architect Associate (SAA-C03)
AWS SAA-C03 Practice Exam 3
65 free questions · No sign-up required to browse
Comprehensive practice exam for the AWS Certified Solutions Architect - Associate (SAA-C03) certification. Covers all four domains: Secure Architectures, Resilient Architectures, High-Performing Architectures, and Cost-Optimized Architectures.
65
Questions
Mixed
Difficulty
72%
Pass mark
Difficulty breakdown
Easy(17)
Medium(33)
Hard(15)
Topics covered
Browse all topics →Domain 1.1: Secure AccessDomain 1.2: Secure WorkloadsDomain 1.3: Data SecurityDomain 2.1: Scalable ArchitecturesDomain 2.2: Highly AvailableDomain 2.3: Decoupling MechanismsDomain 2.4: Resilient StorageDomain 3.1: Storage PerformanceDomain 3.2: Compute PerformanceDomain 3.3: Database PerformanceDomain 3.4: Network PerformanceDomain 3.5: Data IngestionDomain 4.1: Storage Cost OptimizationDomain 4.2: Compute Cost OptimizationDomain 4.3: Database Cost OptimizationDomain 4.4: Network Cost Optimization
Sample questions
Q01Easy1 mark
A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only IAM users from a specific AWS account can access the bucket. Which solution is the MOST secure and requires the LEAST operational overhead?
Q02Medium1 mark
A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to ensure that no user, including root users, can disable AWS CloudTrail in any member account. Which TWO actions should the solutions architect take? (Select TWO.)
Q03Easy1 mark
A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application is experiencing SQL injection attacks. Which AWS service should a solutions architect use to block these attacks?
Q04Medium1 mark
A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized behavior, such as cryptocurrency mining on EC2 instances. Which service should be implemented?
Q05Medium1 mark
A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. The solution must automatically rotate credentials every 30 days. Which TWO services should be used? (Select TWO.)
Ready to Practice the full exam?
All 65 questions with worked answers, mark schemes, and AI tutoring.
All questions (65)
Free to browse · no sign-up requiredQ01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only IAM users from a sp...EasyQ02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to ensure that no user...MediumQ03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application ...EasyQ04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized behavior, such as cr...MediumQ05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. The solution must aut...MediumQ06An application running on Amazon EC2 needs to access an Amazon DynamoDB table. What is the MOST secure way to grant t...EasyQ07A solutions architect is designing a VPC. The requirement is to block a specific malicious IP address from accessing ...MediumQ08A mobile application requires users to sign in using their social media accounts (Google, Facebook). Once authenticat...HardQ09A healthcare company stores petabytes of patient records in Amazon S3. The compliance team needs to automatically dis...EasyQ10A company requires strict auditing of its AWS environment. They need to record all API calls and ensure that the log ...MediumQ11A company is migrating a legacy application to AWS. The application requires a file system that supports the SMB prot...EasyQ12A company wants to share an encrypted Amazon RDS snapshot with another AWS account. The snapshot is encrypted using a...HardQ13A financial institution must store compliance records in Amazon S3 for 7 years. The records must not be deleted or mo...MediumQ14A company is hosting a public-facing web application. They want to protect the application from DDoS attacks, SQL inj...MediumQ15A developer needs to encrypt a 5 GB file before uploading it to Amazon S3. The company policy mandates the use of AWS...HardQ16A company wants a centralized view of security alerts and compliance status across multiple AWS accounts. They want t...EasyQ17A company needs to inspect all outbound traffic from their VPC to the internet. They want to implement stateful domai...MediumQ18A senior developer needs the ability to create new IAM roles for Lambda functions. However, the security team wants t...HardQ19A company wants to allow external users to upload large video files directly to an Amazon S3 bucket without requiring...MediumQ20A company runs a critical database on Amazon RDS for MySQL. They need to ensure the database remains available even i...EasyQ21A web application experiences unpredictable traffic spikes. The architecture uses an Application Load Balancer (ALB) ...MediumQ22A company has a primary web application hosted in the us-east-1 region and a disaster recovery site in us-west-2. The...MediumQ23An application processes messages from an Amazon SQS queue. Occasionally, a malformed message causes the processing a...MediumQ24A financial application processes stock trades. It is critical that trade messages are processed exactly once and in ...EasyQ25A company wants to trigger an automated remediation script whenever an EC2 instance changes its state to 'stopped'. T...MediumQ26An e-commerce application has a complex order fulfillment process involving payment processing, inventory updates, an...MediumQ27A company stores critical backup files in an Amazon S3 bucket in the eu-west-1 region. For disaster recovery complian...MediumQ28A fleet of Amazon EC2 instances needs to access a shared file system simultaneously. The instances are distributed ac...EasyQ29A global gaming company uses Amazon DynamoDB for player profiles. Players are located in the US, Europe, and Asia. Th...HardQ30A company is designing a disaster recovery strategy for an Amazon Aurora PostgreSQL database. They require a Recovery...HardQ31A company needs to ingest streaming clickstream data from their website. The data needs to be buffered and then loade...MediumQ32An on-premises application generates large amounts of video files. The local storage is running out of space. The com...MediumQ33A company has web servers in the us-east-1 and eu-west-1 regions. They want to route users to the region that provide...HardQ34An Auto Scaling group is scaling in. Before an EC2 instance is terminated, the application needs 5 minutes to upload ...HardQ35A company has a microservices architecture. When a new user registers, an event must be sent to three separate micros...MediumQ36A media company needs a high-performance file system for video rendering. The rendering instances run on Linux and re...EasyQ37A scientific research team is running a tightly coupled High Performance Computing (HPC) application on Amazon EC2. T...MediumQ38A database requires 60,000 IOPS and sub-millisecond latency. The data must persist even if the EC2 instance is stoppe...MediumQ39A global media company allows users to upload large video files to an Amazon S3 bucket located in the us-east-1 regio...EasyQ40A website serves static images stored in Amazon S3. Users globally are complaining about slow load times. How can a s...EasyQ41A multiplayer gaming application uses UDP traffic. Users globally are experiencing high latency and packet loss. The ...MediumQ42A relational database is struggling to handle a high volume of read queries for a leaderboard application. The data s...MediumQ43An application uses Amazon DynamoDB. During peak hours, the application experiences read throttling, even though the ...MediumQ44A reporting application runs complex analytical queries against an Amazon Aurora MySQL database. These queries are sl...MediumQ45A company has petabytes of structured data stored in Amazon S3. They want to run complex SQL queries across this data...EasyQ46An application uses AWS Lambda functions to process images uploaded to S3. During marketing campaigns, thousands of i...HardQ47A company is migrating a monolithic application to microservices using Docker containers. They want AWS to manage the...MediumQ48A company has 50 VPCs across multiple AWS accounts. They need to establish network connectivity between all VPCs and ...HardQ49A big data application running on hundreds of EC2 instances needs to read and write to a shared Amazon EFS file syste...HardQ50A company uses Amazon Kinesis Data Streams to ingest telemetry data from IoT devices. The data volume has doubled, an...HardQ51A data engineering team needs to run daily ETL (Extract, Transform, Load) jobs to process logs stored in Amazon S3 an...MediumQ52A research facility has 50 TB of genomic data stored on local NAS devices. They need to transfer this data to Amazon ...EasyQ53A company stores millions of images in Amazon S3. The access patterns are highly unpredictable; some images are acces...EasyQ54A hospital must retain patient records for 10 years for regulatory compliance. The records are rarely accessed after ...EasyQ55A company runs a batch processing workload on Amazon EC2. The workload can be interrupted and resumed without data lo...MediumQ56A company has a steady-state web application running on EC2 instances. They plan to migrate some of these instances t...MediumQ57A development team uses an Amazon Aurora database for testing. The database is only used during business hours and si...MediumQ58A startup is launching a new mobile app backed by Amazon DynamoDB. They have no historical data to predict traffic pa...MediumQ59EC2 instances in a private subnet frequently download large datasets from Amazon S3. The traffic currently routes thr...HardQ60A company has a multi-tier application deployed across three Availability Zones. They have a NAT Gateway in each AZ f...HardQ61A web application hosted on EC2 instances serves a large amount of static media files directly to users over the inte...MediumQ62A company has hundreds of EC2 instances. They suspect many instances are over-provisioned and want a service that use...EasyQ63A company takes daily EBS snapshots of their EC2 instances. Over time, the storage costs for these snapshots have gro...MediumQ64A company runs a production PostgreSQL database on Amazon RDS. The database size is 2 TB and it runs 24/7. The compan...MediumQ65A company wants to use Amazon Macie to discover sensitive data in their S3 buckets. However, they have petabytes of d...Hard