The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Which service provides machine learning capabilities for image analysis?
AAmazon Rekognition
BAmazon Athena
CAWS Data Pipeline
DAmazon Inspector
Explanation
Amazon Rekognition specializes in image and video analysis, while others serve different functions.
Q182
A company needs to detect anomalous user behavior in real time. Which AWS service should they choose?
AAWS Shield
BAmazon GuardDuty
CAWS Config
DAmazon Macie
Explanation
Amazon GuardDuty continuously monitors for anomalous activity, while the others address different security needs.
Q183
What happens when you set an instance's termination protection to enabled?
AFreezes instance state
BPrevents accidental deletions
CIncreases instance performance
DCreates a backup automatically
Explanation
Termination protection prevents the instance from being terminated accidentally; the other options are not related.
Q184
Which service is used for serverless orchestration?
AAWS Step Functions
BAWS Lambda
CAmazon EC2
DAmazon S3
Explanation
AWS Step Functions are designed for orchestrating workflows, unlike Lambda which focuses on execution.
Q185
A company needs to ensure its data in S3 is encrypted at rest. What should they do?
AUse S3 Versioning
BEnable S3 Object Lock
CUse Server-Side Encryption
DSet a Public ACL
Explanation
Server-Side Encryption in S3 automatically encrypts data at rest, while the other options do not ensure encryption.
Q186
You are configuring a VPC peering connection. What happens if the VPCs have overlapping CIDR blocks?
AConnection establishes without issues
BTraffic is routed between VPCs
CPeering fails to establish
DOnly one CIDR block connects
Explanation
Overlapping CIDR blocks prevent the peering connection from being established due to ambiguous routing.
Q187
Which AWS service offers orchestration for containerized applications?
AAmazon ECS
BAWS Batch
CAWS Fargate
DAmazon CloudFront
Explanation
Amazon ECS is built specifically for orchestrating containerized apps; the others serve different purposes.
Q188
You are configuring IAM policies for a user. What is the maximum number of inline policies you can attach to a user?
A10
B20
C50
DUnlimited
Explanation
There is no limit on inline policies attached to IAM users.
Q189
A company needs to securely transfer files between AWS and its on-premises network. Which AWS service is best suited for this purpose?
AAmazon S3
BAWS Direct Connect
CAWS Storage Gateway
DAmazon CloudFront
Explanation
AWS Direct Connect provides a dedicated network connection between AWS and on-premises resources, suitable for secure transfers; others are not optimal for that need.
Q190
Which service is best for automating infrastructure deployment?
AAWS CloudFormation
BAWS CodeDeploy
CAWS EC2
DAWS IAM
Explanation
AWS CloudFormation automates infrastructure, while others serve different purposes.