The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
A company needs to ensure data is not lost. What should they implement?
AS3 Standard Storage
BAWS Snowball
CMulti-AZ RDS
DEC2 T2 instances
Explanation
Multi-AZ RDS provides high availability and durable data, while others do not ensure data safety.
Q12
What happens when an EC2 instance is stopped?
AData on EBS is deleted
BIP address remains the same
CInstance can be restarted
DInstance configuration is lost
Explanation
Stopping an EC2 instance allows it to be restarted, while EBS data is preserved, the IP can change, and configuration persists.
Q13
Which AWS service is best for deploying a web application with auto-scaling?
AAWS Elastic Beanstalk
BAWS Lambda
CAWS EC2
DAWS CloudFormation
Explanation
AWS Elastic Beanstalk automates deployment and scaling, while Lambda is for serverless, EC2 is for manual deployment, and CloudFormation is for infrastructure as code.
Q14
A company needs secure access to AWS resources from a client's on-premises environment. Which service should they use?
AVPN Connection
BDirect Connect
CAWS SSO
DAWS CloudTrail
Explanation
Direct Connect provides a dedicated line for secure access, while VPN connects securely over the internet, SSO is for user management, and CloudTrail logs API calls.
Q15
What happens when an S3 bucket policy denies access to a specific principal?
AAccess is granted to other principals
BAll access is denied to everyone
CDenied principal can still access via IAM roles
DAccess is allowed with MFA authentication
Explanation
The bucket policy only affects the specified principal, allowing other principals access unless denied elsewhere; B is incorrect as it does not blanket deny, C is incorrect as IAM roles do not override explicit denies, and D is incorrect as MFA does not affect explicit denies.
Q16
Which service automatically scales AWS resources based on demand?
AAWS Auto Scaling
BAmazon RDS
CAWS CloudFormation
DAmazon EC2
Explanation
AWS Auto Scaling adjusts resources automatically, while other options do not.
Q17
A company needs to restrict access to S3 objects to only those users who are members of a specific IAM group. Which feature should they use?
ABucket Policy
BIAM Role
CBucket ACL
DIAM Policy
Explanation
Bucket Policy can restrict access based on IAM groups, unlike IAM Role, ACL, or Policy options.
Q18
What happens when you use AWS Lambda with a threshold of memory allocated to it?
AIncreases execution time only
BDecreases cost of execution
CAffects the duration of memory storage
DIncreases available CPU power
Explanation
More memory allocated to Lambda increases CPU power, impacting performance.
Q19
Which service allows you to run code without provisioning servers?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Batch
Explanation
AWS Lambda is serverless, others require management.
Q20
A company needs to ensure data is automatically backed up in S3 and deleted after 30 days. Which feature should be implemented?
AS3 versioning
BS3 lifecycle policies
CS3 cross-region replication
DS3 event notifications
Explanation
Lifecycle policies automate backup and deletion, others do not manage lifecycle.