The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
You are configuring IAM users and groups. What happens when a user is a member of multiple groups with different permission policies?
AUser gets permissions from all groups
BUser gets denied permissions entirely
CUser receives permissions from the least privileged group
DUser is only allowed the highest permissions
Explanation
IAM applies permissions cumulatively from groups, not denied entirely or reduced arbitrarily.
Q112
Which service provides a graphical interface for data visualization?
AAmazon QuickSight
BAWS Glue
CAmazon S3
DAWS Lambda
Explanation
Amazon QuickSight is designed specifically for data visualization, unlike the others which serve different purposes.
Q113
A company needs a fully managed NoSQL database service. Which should they use?
AAmazon RDS
BAmazon DynamoDB
CAmazon Aurora
DAmazon ElastiCache
Explanation
Amazon DynamoDB is a fully managed NoSQL database service, whereas the others are relational or caching services.
Q114
What happens when you use S3 bucket versioning?
AFiles are skipped during uploads.
BPrevious versions are kept.
CAccess logging is disabled.
DFiles can’t be deleted.
Explanation
Enabling S3 versioning retains all previous versions of an object instead of permanently deleting them.
Q115
Which AWS service allows you to run code without managing servers?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon S3
Explanation
AWS Lambda enables serverless execution, while others require server management.
Q116
A company needs to distribute user traffic across multiple EC2 instances. Which service should they use?
AAmazon CloudFront
BAmazon Route 53
CAWS Elastic Load Balancing
DAmazon VPC
Explanation
AWS Elastic Load Balancing effectively distributes traffic among EC2 instances, unlike the others.
Q117
You are configuring S3 bucket permissions. What happens if you grant public access?
AData is encrypted.
BBucket becomes version-controlled.
CAnyone can access bucket data.
DBucket is deleted automatically.
Explanation
Granting public access allows anyone to view bucket data, which is the intended behavior.
Q118
Which service provides managed MySQL databases on AWS?
ARDS
BDynamoDB
CS3
DLambda
Explanation
RDS specifically offers managed MySQL databases; DynamoDB is NoSQL, S3 is object storage, and Lambda is serverless compute.
Q119
A company needs to ensure low-latency access to its web application across multiple regions. What should they use?
ACloudFront
BRoute 53
CS3 Transfer Acceleration
DElastic Load Balancing
Explanation
CloudFront is a CDN that optimizes low-latency delivery; Route 53 is DNS, S3 Transfer is for files, and ELB is for distribution but not for global latency.
Q120
You are configuring an IAM policy with 'Deny' actions. What happens if a user is granted both allow and deny actions?
AAllow actions still apply
BDeny actions override allow
CDeny actions are ignored
DUser cannot perform anything
Explanation
In IAM, explicitly Deny actions always take precedence over Allow actions, enforcing stricter access control.