← AWS Solutions Architect Associate · AWS SAA-C03 Beginner

AWS SAA-C03 Beginner Quiz

Learning Objectives

Understand core AWS services: EC2, S3, VPC, RDS, IAM, and fundamental cloud concepts.

AWS Solutions Architect Associate certification badge
Time left --:--:--
Question 1 / 60 · 60 unanswered
Question 1 of 60
A company wants to host a static website (HTML, CSS, JavaScript) on AWS at the lowest possible cost with high availability. Which solution best meets these requirements? (AWS Certified Solutions Architect — Associate, SAA-C03)
1 / 60
Question 2 of 60
A solutions architect needs to ensure that an EC2 instance can communicate with other AWS services (like S3 and DynamoDB) without storing credentials in the instance's code or configuration files. What should be configured? (AWS Certified Solutions Architect — Associate, SAA-C03)
2 / 60
Question 3 of 60
A company's web application experiences unpredictable traffic — low traffic most of the day with sudden large spikes. They need compute resources that scale automatically to handle spikes and scale back during quiet periods. Which AWS service achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
3 / 60
Question 4 of 60
A company stores files in Amazon S3. They need to ensure that all objects are encrypted at rest using keys managed by the company, not AWS. Which S3 encryption option achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
4 / 60
Question 5 of 60
A startup needs a fully managed relational database on AWS that automatically backs up, patches, and scales storage without administrative overhead. Which service meets this requirement? (AWS Certified Solutions Architect — Associate, SAA-C03)
5 / 60
Question 6 of 60
A company needs a content delivery network (CDN) to cache and serve their application's static assets (images, CSS, JS) from locations close to users worldwide. Which AWS service provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
6 / 60
Question 7 of 60
A company wants to store database credentials (username, password) securely and rotate them automatically every 30 days. Which AWS service is specifically designed for this? (AWS Certified Solutions Architect — Associate, SAA-C03)
7 / 60
Question 8 of 60
A solutions architect needs to design a VPC subnet layout that places web servers in public subnets and database servers in private subnets. What characterizes the difference between public and private subnets in AWS? (AWS Certified Solutions Architect — Associate, SAA-C03)
8 / 60
Question 9 of 60
A company needs to process messages from multiple sources in a decoupled, scalable manner. Messages should be buffered and each message processed once by exactly one consumer. Which AWS service is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
9 / 60
Question 10 of 60
A company needs to connect their on-premises data center to AWS over a private, dedicated network connection that does not use the public internet. Which AWS service provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
10 / 60
Question 11 of 60
An application on EC2 needs low-latency access to frequently accessed data that doesn't need to persist if the instance is stopped. Which storage option is best? (AWS Certified Solutions Architect — Associate, SAA-C03)
11 / 60
Question 12 of 60
A company needs to send email notifications to subscribers when new files are uploaded to an S3 bucket. Which AWS architecture achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
12 / 60
Question 13 of 60
A company's application needs to cache database query results in memory to reduce database load and improve response times. Which AWS service provides a managed in-memory caching layer? (AWS Certified Solutions Architect — Associate, SAA-C03)
13 / 60
Question 14 of 60
An architect is designing a three-tier application. The database tier must be highly available within the AWS region and automatically fail over if the primary database instance fails. Which RDS feature provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
14 / 60
Question 15 of 60
A team wants to monitor their AWS resources for security compliance and receive alerts when configurations deviate from best practices (like public S3 buckets or unrestricted security group rules). Which AWS service continuously evaluates resource configuration compliance? (AWS Certified Solutions Architect — Associate, SAA-C03)
15 / 60
Question 16 of 60
A company wants to grant temporary access to AWS resources for users who authenticate using their existing Google or Facebook account. Which AWS service enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
16 / 60
Question 17 of 60
A developer needs to run code in response to an HTTP request without managing servers. The code runs for less than 15 minutes and needs to access DynamoDB. Which AWS compute option is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
17 / 60
Question 18 of 60
A company's security policy requires that all data in transit between clients and their application must be encrypted. Their application runs behind an Application Load Balancer. How should HTTPS be configured? (AWS Certified Solutions Architect — Associate, SAA-C03)
18 / 60
Question 19 of 60
A startup needs to store and retrieve large binary files (videos, images, up to 5 TB each) with global availability. Which AWS storage service is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
19 / 60
Question 20 of 60
A company wants to run a containerized application on AWS without managing EC2 instances or cluster infrastructure. Which launch type for Amazon ECS achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
20 / 60
Question 21 of 60
A company has a fleet of EC2 instances running in multiple Availability Zones. They need to distribute application traffic evenly across all healthy instances. Which AWS service provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
21 / 60
Question 22 of 60
An architect needs to choose the most cost-effective EC2 pricing option for a batch processing workload that runs 6 hours each night and can tolerate interruption. Which pricing model is appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
22 / 60
Question 23 of 60
A company needs to manage permissions across multiple AWS accounts in an organization centrally. They want to enforce policies preventing account administrators from disabling CloudTrail. Which AWS service provides centralized policy management across accounts? (AWS Certified Solutions Architect — Associate, SAA-C03)
23 / 60
Question 24 of 60
A company's application writes data to DynamoDB every second. They need to track all changes to a specific DynamoDB table and trigger downstream processing when items are created, updated, or deleted. Which DynamoDB feature enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
24 / 60
Question 25 of 60
A company stores customer data in Amazon S3. They need to restrict access so that only the company's VPC can access the bucket, blocking all public internet access. Which S3 feature achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
25 / 60
Question 26 of 60
A solutions architect is designing an application that needs to query data using SQL and perform complex joins on a dataset that grows to hundreds of TB. The data is accessed by analysts running ad-hoc queries. Which AWS service is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
26 / 60
Question 27 of 60
An application deployed on EC2 needs to store temporary session data that is shared across multiple application servers. The data must be highly available and accessed in under 1 millisecond. Which solution is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
27 / 60
Question 28 of 60
A company needs to archive data that will almost never be accessed but must be retrieved within 12 hours when needed, at the lowest possible storage cost. Which S3 storage class is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
28 / 60
Question 29 of 60
A company needs to run a relational database workload that requires high throughput and can scale to millions of requests per second without manual capacity planning. Which AWS database service provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
29 / 60
Question 30 of 60
A solutions architect needs to create a network that separates development, staging, and production environments within the same AWS account. Each environment should have independent security and routing. Which AWS networking construct enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
30 / 60
Question 31 of 60
A company uses AWS CloudFormation to deploy infrastructure. They want to prevent the deletion of a CloudFormation stack that manages production resources. Which CloudFormation feature prevents accidental stack deletion? (AWS Certified Solutions Architect — Associate, SAA-C03)
31 / 60
Question 32 of 60
An EC2 instance in a private subnet needs to download software updates from the internet without receiving an external IP address or being reachable from the internet. What should be configured? (AWS Certified Solutions Architect — Associate, SAA-C03)
32 / 60
Question 33 of 60
A company needs to search and analyze log data from multiple sources to troubleshoot application issues. They want a managed service that indexes log data and provides a query interface. Which AWS service enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
33 / 60
Question 34 of 60
A solutions architect needs to ensure that a company's AWS workloads comply with HIPAA requirements. What is the first step before deploying PHI-handling workloads? (AWS Certified Solutions Architect — Associate, SAA-C03)
34 / 60
Question 35 of 60
A company has an S3 bucket that stores confidential documents. They need to prevent any user (including account admins) from permanently deleting objects and maintain all versions of documents for 7 years. Which combination of features achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
35 / 60
Question 36 of 60
A company wants to reduce the cost of data transfer out of AWS for their globally distributed application. Currently, S3 serves assets directly to global users. Which AWS service reduces this cost by caching content at edge locations? (AWS Certified Solutions Architect — Associate, SAA-C03)
36 / 60
Question 37 of 60
A company runs a critical application on EC2 that must remain available if an entire AWS Availability Zone fails. What is the minimum architecture requirement? (AWS Certified Solutions Architect — Associate, SAA-C03)
37 / 60
Question 38 of 60
An architect needs to design a cost-effective solution for running a test environment that should only be available during business hours (8am-6pm weekdays). Which approach minimizes costs? (AWS Certified Solutions Architect — Associate, SAA-C03)
38 / 60
Question 39 of 60
A company needs to migrate a large dataset (50 TB) from on-premises to Amazon S3. Internet bandwidth is limited to 1 Gbps. They need to complete the migration within 7 days. Which method is most efficient? (AWS Certified Solutions Architect — Associate, SAA-C03)
39 / 60
Question 40 of 60
A company is running a web application that needs to prevent common web exploits like SQL injection and cross-site scripting (XSS). Which AWS service provides a Web Application Firewall? (AWS Certified Solutions Architect — Associate, SAA-C03)
40 / 60
Question 41 of 60
A company wants to analyze clickstream data from their website in real time and make business decisions within seconds of user actions. Which AWS service ingests and processes streaming data at scale? (AWS Certified Solutions Architect — Associate, SAA-C03)
41 / 60
Question 42 of 60
A company stores sensitive data in Amazon RDS. They need encryption of the database at rest using their own keys managed in AWS KMS. At what point must encryption be enabled on an RDS instance? (AWS Certified Solutions Architect — Associate, SAA-C03)
42 / 60
Question 43 of 60
A company needs to share a private S3 bucket's objects with a partner company's AWS account without making the objects public. Which approach enables cross-account S3 access? (AWS Certified Solutions Architect — Associate, SAA-C03)
43 / 60
Question 44 of 60
An organization needs to enable multiple AWS accounts under a single payer for billing consolidation and apply governance policies across all accounts. Which AWS service provides this multi-account management? (AWS Certified Solutions Architect — Associate, SAA-C03)
44 / 60
Question 45 of 60
A company wants to implement Single Sign-On (SSO) for employees to access multiple AWS accounts and cloud applications using their existing Microsoft Active Directory credentials. Which AWS service enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
45 / 60
Question 46 of 60
A solutions architect is designing a serverless API that receives JSON requests, validates and transforms them, and stores results in DynamoDB. Which combination of AWS services forms the most appropriate serverless architecture? (AWS Certified Solutions Architect — Associate, SAA-C03)
46 / 60
Question 47 of 60
A company needs to provide a consistent query interface for data stored in S3, without loading it into a database. Data is in CSV and Parquet format. Which service enables serverless SQL queries directly on S3? (AWS Certified Solutions Architect — Associate, SAA-C03)
47 / 60
Question 48 of 60
A company needs to automatically remediate non-compliant AWS resources identified by AWS Config rules — for example, automatically enabling encryption on unencrypted S3 buckets. Which AWS service combination enables automated remediation? (AWS Certified Solutions Architect — Associate, SAA-C03)
48 / 60
Question 49 of 60
An architect needs to choose a load balancer for a real-time gaming application that uses UDP protocol for low-latency game state updates. Which AWS load balancer supports UDP? (AWS Certified Solutions Architect — Associate, SAA-C03)
49 / 60
Question 50 of 60
A company receives files from partners via SFTP and needs to process them in AWS. They want a managed service for SFTP without running SFTP server infrastructure. Which AWS service provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
50 / 60
Question 51 of 60
A company's application experiences daily peak traffic. The architect wants to pre-warm the load balancer so it can handle the surge without performance degradation. Which approach is correct for an Application Load Balancer? (AWS Certified Solutions Architect — Associate, SAA-C03)
51 / 60
Question 52 of 60
A company needs to store and retrieve structured data with flexible querying patterns without managing a database server. The data has variable attributes per item (schema-less). Which AWS database is most appropriate? (AWS Certified Solutions Architect — Associate, SAA-C03)
52 / 60
Question 53 of 60
A company needs to monitor their AWS account for unusual API activity — such as a root account login, large data deletion, or disabling of CloudTrail. Which AWS service detects these threat patterns? (AWS Certified Solutions Architect — Associate, SAA-C03)
53 / 60
Question 54 of 60
A development team uses Amazon ECR to store Docker container images. They need to automatically scan images for known vulnerabilities when they are pushed. Which ECR feature provides this? (AWS Certified Solutions Architect — Associate, SAA-C03)
54 / 60
Question 55 of 60
A company needs to store and access session data for millions of concurrent web users with consistent sub-10ms response times at any load. The session data expires after 30 minutes of inactivity. Which AWS service configuration best meets these requirements? (AWS Certified Solutions Architect — Associate, SAA-C03)
55 / 60
Question 56 of 60
A company's application running on EC2 stores user uploads in a shared directory. They are migrating to containers on ECS Fargate and need the shared file storage to persist across container tasks and be accessible from multiple tasks simultaneously. Which AWS storage service supports this? (AWS Certified Solutions Architect — Associate, SAA-C03)
56 / 60
Question 57 of 60
An operations engineer needs to run ad-hoc shell commands and scripts on multiple EC2 instances without SSH access. Which AWS service enables this? (AWS Certified Solutions Architect — Associate, SAA-C03)
57 / 60
Question 58 of 60
A company wants to implement tagging enforcement across all new AWS resources to ensure cost allocation tags (CostCenter, Project, Environment) are always present. Which AWS mechanism enforces required tags at resource creation time? (AWS Certified Solutions Architect — Associate, SAA-C03)
58 / 60
Question 59 of 60
A company uses AWS CloudTrail and wants to detect when an IAM user's access key has not been rotated in more than 90 days. Which combination achieves continuous monitoring for this condition? (AWS Certified Solutions Architect — Associate, SAA-C03)
59 / 60
Question 60 of 60
A company needs to design an architecture that processes orders reliably. If the order processing service fails, orders must not be lost and must be retried automatically when the service recovers. Which AWS design pattern best achieves this? (AWS Certified Solutions Architect — Associate, SAA-C03)
60 / 60