The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
A company needs to migrate a database with minimal downtime. Which AWS service should they use?
AAWS Database Migration Service
BAWS Snowball
CAWS Direct Connect
DAWS Backups
Explanation
AWS Database Migration Service facilitates live migration with minimal downtime; others do not address the same need.
Q252
What happens when an S3 bucket policy denies all access to objects?
AObjects are deleted immediately
BObjects are inaccessible until policy changes
CObjects become publicly accessible
DObjects can be accessed by bucket owner only
Explanation
Denying access in the policy restricts all access until altered; the others present incorrect behaviors of object access.
Q253
Which service provides serverless compute for code execution?
AAWS Lambda
BEC2
CElastic Beanstalk
DECS
Explanation
AWS Lambda allows code execution without server management; others require server configuration or management.
Q254
A company needs to ensure that its S3 bucket is not publicly accessible. What should they do?
AEnable MFA Delete
BUse resource-based policies
CSet bucket versioning
DTurn on CORS configurations
Explanation
Resource-based policies can control access; the others do not prevent public access.
Q255
What happens when an EC2 instance’s underlying physical server fails?
AThe instance automatically restarts
BData is lost permanently
CThe instance is terminated
DThe instance remains unaffected
Explanation
EC2 provides automatic recovery for failed instances; the others incorrectly describe the instance behavior.
Q256
Which service is best for real-time data streaming?
AAmazon Kinesis
BAmazon S3
CAmazon RDS
DAmazon CloudFront
Explanation
Amazon Kinesis specializes in real-time data streaming; S3 is for storage, RDS is for databases, and CloudFront is for content delivery.
Q257
A company needs to ensure their web application scales with increased traffic. Which service best addresses this need?
AAmazon EC2 Auto Scaling
BAWS Lambda
CAmazon RDS
DAmazon CloudWatch
Explanation
Amazon EC2 Auto Scaling dynamically adjusts instance counts; Lambda is serverless, RDS focuses on databases, and CloudWatch monitors services.
Q258
What happens when a Security Group's inbound rules are modified to deny all traffic?
AOnly external traffic is denied
BNo traffic in or out is allowed
CAll traffic is blocked completely
DExisting connections are unaffected
Explanation
Denying all inbound traffic blocks all incoming connections; existing connections must adhere to security group rules, while options A and C incorrectly describe the impact.
Q259
Which service is designed for real-time analytics on streaming data?
AAmazon Kinesis
BAmazon S3
CAmazon RDS
DAmazon Glacier
Explanation
Amazon Kinesis specializes in handling real-time streaming data, while others serve different data management purposes.
Q260
A company needs to securely share resources among multiple AWS accounts. Which service should they use?
AAWS Organizations
BAWS Resource Access Manager
CAWS IAM Roles
DAWS CloudFormation
Explanation
AWS Resource Access Manager allows secure resource sharing, whereas the other options focus on different aspects of account management or resource deployment.