The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Which service is best for real-time data streaming?
AAmazon Kinesis
BAmazon S3
CAmazon RDS
DAWS Lambda
Explanation
Amazon Kinesis is designed for real-time data streaming, whereas the others serve different purposes.
Q152
A company needs high availability for its database. Which AWS feature should it use?
AMulti-AZ deployments
BRead Replicas
CAuto Scaling
DS3 Versioning
Explanation
Multi-AZ deployments provide high availability by replicating data across multiple availability zones.
Q153
What happens when an IAM policy evaluates 'deny' first?
AAccess is denied
BAccess is granted
CNo effect on permissions
DPolicy is ignored
Explanation
In IAM, 'deny' always takes precedence over 'allow', resulting in denied access.
Q154
Which service provides scalable DNS management?
AAmazon Route 53
BAWS CloudTrail
CAmazon VPC
DAWS IAM
Explanation
Amazon Route 53 is specifically designed for DNS management; others do not provide this functionality.
Q155
A company needs to analyze log data in real-time. Which service should they use?
AAmazon S3
BAmazon Athena
CAmazon Redshift
DAmazon Kinesis
Explanation
Amazon Kinesis is built for real-time data processing while the others are meant for batch or offline analysis.
Q156
You are configuring an EC2 instance to ensure it can recover from system failures. What should you use?
AElastic IP
BAWS Backup
CAuto Scaling Group
DEC2 Spot Instances
Explanation
Auto Scaling Groups automatically replace unhealthy instances, while others do not provide this specific recovery capability.
Q157
Which AWS service provides managed Kubernetes clusters?
AAmazon ECS
BAWS Lambda
CAmazon EKS
DAWS Fargate
Explanation
Amazon EKS offers managed Kubernetes, while ECS is for Docker containers and Lambda is for serverless functions.
Q158
A company needs to securely share temporary access to AWS resources. What should be used?
AIAM user
BIAM role
CAccess key
DFederated access
Explanation
IAM roles allow temporary access from trusted entities which is ideal for your requirement, unlike permanent IAM users.
Q159
What happens when an S3 bucket policy denies a specific IP address?
AAccess granted to all others
BBucket becomes publicly inaccessible
COnly that IP can access
DAll requests are denied
Explanation
Denying a specific IP address only excludes that IP, allowing others access; the bucket does not become publicly inaccessible unless specified.
Q160
Which service provides a fully managed NoSQL database?
AAmazon DynamoDB
BAmazon RDS
CAmazon Aurora
DAmazon Redshift
Explanation
DynamoDB is designed for NoSQL workloads, while RDS and Aurora handle SQL databases, and Redshift is for data warehousing.