20:00

PDF|

Guide for SAA-C03: Amazon AWS Certified Solutions Architect - Associate

Quiz SAA-C03: Amazon AWS Certified Solutions Architect - Associate

Free Test
/ 10

Quiz

1/10
A company is migrating a multi-tier application to AWS and needs to implement fine-grained access control
across multiple AWS accounts. The application has separate development, staging, and production
environments, each in its own account. The company wants to allow developers in the development account
to assume a role in the staging account with limited permissions, but prevent them from accessing
production.
Which combination of AWS services and configurations should be used to implement this requirement?
Select the answer
1 correct answer
A.
Create IAM roles in each account with trust relationships. In the staging account role, set a trust policy that allows the development account's IAM principal to assume it. In the production account role, do not include the development account in the trust policy.
B.
Use AWS Organizations SCPs (Service Control Policies) to deny access from the development account to the production account, and grant cross-account access using bucket policies.
C.
Create IAM users in the staging account and assign them directly to developers in the development account using IAM Identity Center federation.
D.
Use VPC peering between accounts and restrict access using security groups in the staging and production accounts.

Quiz

2/10
An organization runs a critical e-commerce application on EC2 instances behind an Application Load Balancer
(ALB) in a single Availability Zone. The application experiences occasional outages during zone failures,
affecting customer transactions. The architecture uses RDS Multi-AZ for the database but only single-AZ for
compute.
To improve resilience with minimal application changes, what is the most appropriate solution?
Select the answer
1 correct answer
A.
Deploy Auto Scaling group across multiple Availability Zones with the ALB configured to distribute traffic across them. Use RDS Multi-AZ and enable failover replicas for read scaling.
B.
Replicate the entire application and ALB to a second region using AWS DataSync and configure Route 53 health checks to fail over between regions.
C.
Use AWS Backup to create point-in-time snapshots of EC2 instances and RDS, then manually restore them to another AZ when an outage occurs.
D.
Deploy the application on Fargate in ECS with a network load balancer and enable cross-region auto- scaling using Lambda functions.

Quiz

3/10
A startup is building a real-time analytics platform that ingests clickstream data from multiple web properties
at a rate of 500,000 events per second. The data must be processed with sub-second latency and stored in a
format optimized for OLAP (Online Analytical Processing) queries. Cost is a significant constraint, and the
team wants to minimize operational overhead.
Which architecture best meets these requirements?
Select the answer
1 correct answer
A.
Use Amazon Kinesis Data Streams to ingest events, followed by Lambda for transformation, storing results in Amazon Redshift for OLAP queries.
B.
Ingest events into Amazon MSK (Managed Streaming for Apache Kafka), transform using Flink, and store in Amazon S3 with Parquet format. Use Amazon Athena for querying.
C.
Stream events directly to DynamoDB with provisioned capacity, use DynamoDB Streams for transformation, and query using PartiQL.
D.
Use Amazon EventBridge to route events to multiple SQS queues, process with batch Lambda functions, and store in RDS Aurora for analytical queries.

Quiz

4/10
A financial services company must store sensitive customer data in AWS and comply with regulatory
requirements mandating encryption at rest and in transit, with strict key management controls. The
company wants a solution that provides centralized key management and automatic key rotation without
managing infrastructure.
Which approach best satisfies these compliance requirements?
Select the answer
1 correct answer
A.
Use AWS Secrets Manager to store encryption keys and configure automatic rotation policies on the keys. Enable TLS for all data in transit.
B.
Use AWS Key Management Service (KMS) with customer-managed keys (CMK), enable automatic key rotation, and enforce TLS on all data connections. Enable CloudTrail logging for key usage.
C.
Use Amazon S3 server-side encryption with S3-managed keys (SSE-S3) and enable MFA Delete on buckets for additional security.
D.
Encrypt data using application-layer encryption with keys stored in AWS Parameter Store, and configure VPC endpoints to encrypt data in transit.

Quiz

5/10
A company operates a web application that experiences predictable traffic patterns: high demand during
business hours (9 AM–5 PM, 500 instances) and low demand outside those hours (50 instances). The
company wants to optimize costs while maintaining performance. Current infrastructure uses On-Demand
EC2 instances with a fixed capacity, costing $8,000 per month.
Which cost optimization strategy would deliver the greatest savings?
Select the answer
1 correct answer
A.
Purchase a mix of Reserved Instances for the baseline 50 instances and use On-Demand instances for peak hours, supplemented by Spot Instances for non-critical workloads.
B.
Migrate the entire application to AWS Lambda with scheduled invocations during business hours and disable it during off-peak times.
C.
Reduce instance size from current specifications and increase the count to maintain throughput without changing overall capacity.
D.
Enable Auto Scaling to dynamically adjust instance count and switch all instances to Spot Instances for maximum cost reduction.

Quiz

6/10
A company is designing a VPC architecture in AWS and needs to ensure that multiple subnets within the VPC
can communicate with each other privately, while also allowing controlled egress to the internet. The
company wants to route outbound traffic from private subnets through a single, highly available point
without managing NAT instances.
What AWS service should be used to provide this functionality?
Select the answer
1 correct answer
The correct answer is NAT Gateway. A NAT Gateway is a managed AWS service that enables instances in
private subnets to initiate outbound connections to the internet or other AWS services while remaining
unreachable from inbound internet connections. NAT Gateways are highly available, automatically scaled, and
require no manual patching or management, unlike self-managed NAT instances (which are EC2 instances
running NAT software). For subnets to achieve high availability, a NAT Gateway should be deployed in each
Availability Zone. The service is positioned in public subnets and routes traffic from private subnet route tables
through the NAT Gateway via the internet gateway. This architecture satisfies the requirement for controlled,
single-point egress with minimal operational overhead.
Other potential answers like NAT Instance or VPN would be incorrect because NAT Instance requires manual
management and is not highly available by default, while VPN is designed for site-to-site or client-to-site
connectivity, not for providing internet egress from private subnets.

Quiz

7/10
A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will serve
as a backend for a desktop client that is deployed on premises. The desktop client requires direct
connectivity to the RDS cluster.
The company must give the development team the ability to connect to the cluster by using the client when
the team is in the office.
Which solution provides the required connectivity MOST securely?
Select the answer
1 correct answer
A.
Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS Site-t- -Site VPN with a customer gateway in the company's office.
B.
Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS Site-t- -Site VPN with a customer gateway in the company's office.
C.
Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS security groups to allow the company's office IP ranges to access the cluster.
D.
Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a cluster user for each developer. Use RDS security groups to allow the users to access the cluster.

Quiz

8/10
A social media company wants to store its database of user profiles, relationships, and interactions in
the AWS Cloud. The company needs an application to monitor any changes in the database. The
application needs to analyze the relationships between the data entities and to provide
recommendations to users.
Which solution will meet these requirements with the LEAST operational overhead?
Select the answer
1 correct answer
A.
Use Amazon Neptune to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
B.
Use Amazon Neptune to store the information. Use Neptune Streams to process changes in the database.
C.
Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
D.
Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Neptune Streams to process changes in the database.

Quiz

9/10
A company uses an Amazon S3 bucket as its data lake storage platform The S3 bucket contains a
massive amount of data that is accessed randomly by multiple teams and hundreds of applications.
The company wants to reduce the S3 storage costs and provide immediate availability for frequently
accessed objects
What is the MOST operationally efficient solution that meets these requirements?
Select the answer
1 correct answer
A.
Create an S3 Lifecycle rule to transition objects to the S3 Intelligent-Tiering storage class
B.
Store objects in Amazon S3 Glacier Use S3 Select to provide applications with access to the data.
C.
Use data from S3 storage class analysis to create S3 Lifecycle rules to automatically transition objects to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class.
D.
Transition objects to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class Create an AWS Lambda function to transition objects to the S3 Standard storage class when they are accessed by an application

Quiz

10/10
A company needs to optimize its Amazon S3 storage costs for an application that generates many
files that cannot be recreated Each file is approximately 5 MB and is stored in Amazon S3 Standard
storage.
The company must store the files for 4 years before the files can be deleted The files must be
immediately accessible The files are frequently accessed in the first 30 days of object creation, but
they are rarely accessed after the first 30 days.
Which solution will meet these requirements MOST cost-effectively?
Select the answer
1 correct answer
A.
Create an S3 Lifecycle policy to move the files to S3 Glacier Instant Retrieval 30 days after object creation. Delete the files 4 years after object creation.
B.
Create an S3 Lifecycle policy to move the files to S3 One Zone-Infrequent Access (S3 One Zone-IA) 30 days after object creation Delete the files 4 years after object creation.
C.
Create an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation Delete the files 4 years after object creation.
D.
Create an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation. Move the files to S3 Glacier Flexible Retrieval 4 years after object creation.
Looking for more questions?Buy now

SAA-C03: Amazon AWS Certified Solutions Architect - Associate Practice test unlocks all online simulator questions

Thank you for choosing the free version of the SAA-C03: Amazon AWS Certified Solutions Architect - Associate practice test! Further deepen your knowledge on Amazon Simulator; by unlocking the full version of our SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator you will be able to take tests with over 902 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 902 questions.

BUY NOW

What to expect from our SAA-C03: Amazon AWS Certified Solutions Architect - Associate practice tests and how to prepare for any exam?

The SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator Practice Tests are part of the Amazon Database and are the best way to prepare for any SAA-C03: Amazon AWS Certified Solutions Architect - Associate exam. The SAA-C03: Amazon AWS Certified Solutions Architect - Associate practice tests consist of 902 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The SAA-C03: Amazon AWS Certified Solutions Architect - Associate database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator will also give you an idea of the time it will take to complete each section of the SAA-C03: Amazon AWS Certified Solutions Architect - Associate practice test . It is important to note that the SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator does not replace the classic SAA-C03: Amazon AWS Certified Solutions Architect - Associate study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the SAA-C03: Amazon AWS Certified Solutions Architect - Associate exam.

BUY NOW

SAA-C03: Amazon AWS Certified Solutions Architect - Associate Practice test therefore represents an excellent tool to prepare for the actual exam together with our Amazon practice test . Our SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator and how our unique SAA-C03: Amazon AWS Certified Solutions Architect - Associate Database made up of real questions:

Info quiz:

  • Quiz name:SAA-C03: Amazon AWS Certified Solutions Architect - Associate
  • Total number of questions:902
  • Number of questions for the test:50
  • Pass score:80%

You can prepare for the SAA-C03: Amazon AWS Certified Solutions Architect - Associate exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator.

Use our Mobile App, available for both Android and iOS devices, with our SAA-C03: Amazon AWS Certified Solutions Architect - Associate Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all SAA-C03: Amazon AWS Certified Solutions Architect - Associate practice tests which consist of 902 questions and also provide study material to pass the final SAA-C03: Amazon AWS Certified Solutions Architect - Associate exam with guaranteed success. Our SAA-C03: Amazon AWS Certified Solutions Architect - Associate database contain hundreds of questions and Amazon Tests related to SAA-C03: Amazon AWS Certified Solutions Architect - Associate Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW