65 free questions · No sign-up required to browse
Comprehensive practice exam for AWS Certified Solutions Architect - Associate (SAA-C03). Covers Design Secure Architectures, Resilient Architectures, High-Performing Architectures, and Cost-Optimized Architectures.
A company needs to grant an external auditor read-only access to specific AWS resources. The auditor has their own AWS account. What is the MOST secure way to grant this access?
An application running on EC2 instances needs to access objects in an S3 bucket. The security team mandates that no hardcoded credentials are used. How should a solutions architect meet this requirement?
A company is designing a VPC for a multi-tier web application. They need to block specific malicious IP addresses from accessing the web servers, while allowing legitimate HTTPS traffic. Which TWO actions should the solutions architect take? (Select TWO.)
A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to ensure that no user or role in any member account can disable AWS CloudTrail. What is the MOST efficient way to enforce this?
A company hosts a web application on an Application Load Balancer (ALB). They are experiencing SQL injection attacks and cross-site scripting (XSS) attempts. Which AWS service should be deployed to protect the application?
All 65 questions with worked answers, mark schemes, and AI tutoring.