SAA-C03
AWS Solutions Architect Associate Practice Questions
Practice secure, resilient, high-performing, and cost-optimized architecture design questions along the SAA-C03 exam domains.
Questions
All questions
Filter by category and difficulty.
Showing 1–10 of 50 questions
SAA-001Design Secure ArchitecturesNormal
A web application delivers static files stored in Amazon S3 through CloudFront. You do not want to expose the S3 bucket publicly and want to allow access only from CloudFront. Which configuration is the most appropriate?
Related services: S3 / CLOUDFRONT / IAM
SAA-002Design Secure ArchitecturesNormal
A Lambda function needs to write inquiry data to a DynamoDB table. Which IAM policy best follows the principle of least privilege?
Related services: LAMBDA / DYNAMODB / IAM
SAA-003Design Secure ArchitecturesHard
EC2 instances in a private subnet need to access Amazon S3. You want to avoid communication over the internet and avoid the cost of a NAT Gateway. Which configuration is the most appropriate?
Related services: VPC / S3
SAA-004Design Secure ArchitecturesNormal
An application connects to RDS for MySQL. You do not want to store DB credentials in source code or environment variables in plaintext. Which service is the most appropriate for storing credentials securely with periodic rotation in mind?
Related services: RDS / SECRETS-MANAGER / IAM
SAA-005Design Secure ArchitecturesNormal
You want internal users to be able to read only a specific prefix within an S3 bucket. From a least-privilege perspective, which design is the most appropriate?
Related services: S3 / IAM
SAA-006Design Secure ArchitecturesHard
You operate multiple AWS accounts. You want to centrally review the configuration change history of each account from an audit account. Which service is the most appropriate?
Related services: CLOUDTRAIL / ORGANIZATIONS / S3
SAA-007Design Secure ArchitecturesNormal
You do not want EC2 instances behind an Application Load Balancer to receive direct HTTP access from the internet. Which security group configuration is the most appropriate?
Related services: EC2 / ELB / VPC
SAA-008Design Secure ArchitecturesNormal
You want to encrypt objects stored in an S3 bucket with KMS keys that you manage yourself, rather than AWS-managed encryption keys. Which encryption method is the most appropriate?
Related services: S3 / KMS
SAA-009Design Resilient ArchitecturesNormal
You have an RDS for MySQL instance running in a single AZ. You want to improve DB availability so that it remains available during an AZ failure. Which configuration minimizes application-side changes?
Related services: RDS
SAA-010Design Resilient ArchitecturesNormal
You want to run a web application on EC2 distributed across multiple AZs and stop sending traffic to instances with failures. Which configuration is the most appropriate?
Related services: EC2 / ELB / AUTO-SCALING