ExpertAWS Solutions Architect Associate (SAA-C03)
AWS SAA-C03 Practice Exam 7
65 free questions · No sign-up required to browse
Comprehensive practice exam for the AWS Certified Solutions Architect - Associate (SAA-C03) certification. Covers all four domains: Secure Architectures, Resilient Architectures, High-Performing Architectures, and Cost-Optimized Architectures.
65
Questions
Mixed
Difficulty
72%
Pass mark
Difficulty breakdown
Easy(20)
Medium(36)
Hard(9)
Topics covered
Browse all topics →Domain 1.1: Secure AccessDomain 1.2: Secure WorkloadsDomain 1.3: Data SecurityDomain 2.1: Scalable ArchitecturesDomain 2.2: Highly Available ArchitecturesDomain 2.3: Decoupling MechanismsDomain 2.4: Resilient StorageDomain 3.1: Storage PerformanceDomain 3.2: Compute PerformanceDomain 3.3: Database PerformanceDomain 3.4: Network PerformanceDomain 3.5: Data IngestionDomain 4.1: Storage Cost OptimizationDomain 4.2: Compute Cost OptimizationDomain 4.3: Database Cost OptimizationDomain 4.4: Network Cost Optimization
Sample questions
Q01Medium1 mark
A company has multiple AWS accounts in an AWS Organizations organization. The security team needs to ensure that no user or role in any account can disable AWS CloudTrail. What is the MOST secure and efficient way to meet this requirement?
Q02Easy1 mark
An application runs on Amazon EC2 instances and needs to access an Amazon S3 bucket. What is the MOST secure way to grant the EC2 instances access to the S3 bucket?
Q03Medium1 mark
A company wants to implement federated access to the AWS Management Console for its employees using their existing on-premises Active Directory. Which TWO services or features can be used to achieve this? (Select TWO.)
Q04Easy1 mark
A company is building a mobile application that requires users to sign in using their social media accounts (Facebook, Google). The application needs to access AWS resources like Amazon DynamoDB after authentication. Which AWS service should be used?
Q05Medium1 mark
A security team wants to enforce MFA for all IAM users before they can terminate EC2 instances. How can a Solutions Architect implement this requirement?
Ready to Practice the full exam?
All 65 questions with worked answers, mark schemes, and AI tutoring.
All questions (65)
Free to browse · no sign-up requiredQ01A company has multiple AWS accounts in an AWS Organizations organization. The security team needs to ensure that no u...MediumQ02An application runs on Amazon EC2 instances and needs to access an Amazon S3 bucket. What is the MOST secure way to g...EasyQ03A company wants to implement federated access to the AWS Management Console for its employees using their existing on...MediumQ04A company is building a mobile application that requires users to sign in using their social media accounts (Facebook...EasyQ05A security team wants to enforce MFA for all IAM users before they can terminate EC2 instances. How can a Solutions A...MediumQ06A company needs to grant a third-party vendor access to an S3 bucket in its AWS account. The vendor will access the b...HardQ07A developer needs to pass a database password to an AWS Lambda function. The password must be encrypted and rotated a...EasyQ08A company is hosting a web application on EC2 instances behind an Application Load Balancer (ALB). The company wants ...EasyQ09A solutions architect is designing a VPC for a multi-tier application. The database tier must be completely isolated ...MediumQ10A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized behavior, such as un...EasyQ11An application uses an Amazon RDS MySQL database. The security team requires that all database connections use SSL/TL...HardQ12A company is deploying a fleet of EC2 instances in a private subnet. The instances need to access Amazon S3 to downlo...MediumQ13A company wants to secure its VPC network. They need to explicitly deny traffic from a specific malicious IP address ...MediumQ14A company is using AWS Security Hub to aggregate security alerts. They want to automatically remediate specific findi...MediumQ15A healthcare company stores patient records in Amazon S3. Compliance requires that the data must be encrypted at rest...MediumQ16A financial institution needs to store highly sensitive regulatory documents in Amazon S3. The documents must be prot...MediumQ17A company has a large amount of data stored in Amazon S3. They suspect that some of the buckets contain unencrypted P...EasyQ18A company requires that all EBS volumes attached to new EC2 instances must be encrypted. How can a solutions architec...MediumQ19A company uses AWS KMS to manage encryption keys. They have a requirement that the cryptographic key material must be...HardQ20A database contains highly sensitive data. The company wants to ensure that if a snapshot of the database is shared w...MediumQ21A company is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (A...EasyQ22An architecture consists of an API Gateway routing requests to AWS Lambda functions. The Lambda functions process the...EasyQ23A company is migrating a legacy application to AWS. The application requires a load balancer that can handle millions...MediumQ24A company has a microservices architecture running on Amazon ECS. They need to route HTTP/HTTPS traffic to different ...EasyQ25A solutions architect is designing a system that processes uploaded images. When an image is uploaded to S3, it needs...HardQ26A company runs a critical database on Amazon RDS for PostgreSQL. The database must remain available even if an entire...EasyQ27A global application is deployed in two AWS Regions: us-east-1 and eu-west-1. The company wants to route users to the...EasyQ28A company is designing a disaster recovery (DR) strategy for their AWS environment. They have a strict Recovery Time ...HardQ29A web application is deployed across multiple Availability Zones behind an Application Load Balancer (ALB). The EC2 i...MediumQ30A company uses Amazon S3 to store critical business documents. They want to protect against accidental deletion or ov...MediumQ31An e-commerce application uses an Amazon SQS queue to decouple the order ingestion web tier from the order processing...MediumQ32A company is building a serverless workflow that involves multiple steps: checking inventory, processing payment, and...MediumQ33An application generates a massive stream of clickstream data (up to 1 GB/second). The data needs to be buffered and ...MediumQ34A financial application requires that transaction messages are processed exactly once and in the exact order they wer...HardQ35A company needs a shared file system that can be accessed concurrently by hundreds of Amazon EC2 Linux instances acro...EasyQ36A company has an on-premises application that needs to store backups in AWS. The application requires a local cache f...MediumQ37A media company stores high-resolution video files in Amazon S3. The files are frequently accessed for the first 30 d...MediumQ38A database application running on an EC2 instance requires a block storage volume that can sustain 64,000 IOPS and pr...MediumQ39A global user base frequently uploads large video files (up to 5 GB) to an Amazon S3 bucket located in the us-east-1 ...EasyQ40An application requires a shared file system. The workload is highly parallel and requires massive throughput (up to ...HardQ41A company is running a tightly coupled High Performance Computing (HPC) application on a fleet of EC2 instances. The ...EasyQ42A data analytics company needs to process large datasets using Apache Spark. The workload requires instances with a h...EasyQ43A company is migrating a containerized web application to AWS. The application experiences sudden, unpredictable spik...MediumQ44An application uses AWS Lambda to process images uploaded to S3. During peak times, users report that image processin...MediumQ45A gaming company uses Amazon DynamoDB to store player leaderboards. The application experiences heavy read traffic, a...EasyQ46A reporting application runs complex SQL queries against an Amazon RDS for MySQL database. During the end-of-month re...MediumQ47A company is migrating its on-premises Oracle data warehouse to AWS. The new solution must be a fully managed, petaby...MediumQ48A company is building a highly available web application. They need a database that provides single-digit millisecond...MediumQ49A company hosts a static website on Amazon S3. Users in Australia are complaining about slow load times, while users ...EasyQ50A multiplayer gaming company uses UDP traffic for real-time gameplay. The servers are hosted in the eu-central-1 regi...MediumQ51A company has 50 VPCs spread across multiple AWS Regions. They need to establish a hub-and-spoke network topology to ...MediumQ52A company receives daily CSV files in an Amazon S3 bucket. They need to automatically transform these files into Apac...MediumQ53A company needs to ingest real-time log data from thousands of EC2 instances. The data must be processed in real-time...HardQ54A company stores millions of images in Amazon S3. They do not know the access patterns of the images; some are access...EasyQ55A company has a large number of EBS snapshots that are kept for compliance purposes. They want to reduce the cost of ...MediumQ56A company runs a batch processing job on Amazon EC2 every night. The job takes about 3 hours to complete. The workloa...EasyQ57A company has a predictable, steady-state workload running on EC2 instances 24/7. They want to reduce costs and are w...MediumQ58A company wants to optimize the costs of their existing EC2 instances. They suspect many instances are over-provision...MediumQ59A startup is building a new application using Amazon DynamoDB. The application will have unpredictable traffic for th...EasyQ60A company has a development database running on Amazon Aurora MySQL. The database is only used by developers during b...MediumQ61An application running in a VPC private subnet needs to download large amounts of data from Amazon S3. Currently, the...MediumQ62A company serves a popular mobile app that downloads large media files. The files are stored in an S3 bucket in us-ea...MediumQ63A company is designing a multi-tier architecture. They want to minimize cross-AZ data transfer costs while maintainin...HardQ64A company is migrating a legacy application to AWS. The application requires a relational database. The database will...MediumQ65A company has a fleet of EC2 instances that generate log files. The logs are sent to Amazon CloudWatch Logs. The comp...Medium