Amazon AWS
AWS Certified Solutions Architect – Associate
SAA-C03
The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Questions 341–350 of 483
A company needs to run code in response to events. Which service should they use?
A
AWS Lambda
B
AWS Fargate
C
Amazon EC2
D
Amazon ECS
AWS Lambda runs code in response to events without provisioning servers.
What happens when an EC2 instance in an Auto Scaling group becomes unhealthy?
A
Instance is terminated and replaced
B
Instance remains active
C
Instance is flagged manually
D
Instance is paused temporarily
Auto Scaling automatically replaces unhealthy instances to maintain availability.
Which service is best for real-time data processing?
A
AWS Lambda
B
AWS Batch
C
AWS Glue
D
Amazon S3
AWS Lambda can process streams in real time, while others are more batch-oriented.
A company needs to securely share data among VPCs. What should they use?
A
VPC Peering
B
AWS Transit Gateway
C
PrivateLink
D
Direct Connect
AWS Transit Gateway simplifies inter-VPC connections securely, unlike peering which requires direct connections.
What happens when you change an S3 bucket policy to deny access?
A
Access remains unchanged.
B
All access is immediately denied.
C
Only some users are denied.
D
Logs are created for all actions.
Deny overrides allows, blocking all access based on the policy change.
Which service is ideal for discovering vulnerabilities in applications in AWS?
A
Amazon Inspector
B
AWS CloudTrail
C
AWS Lambda
D
Amazon RDS
Amazon Inspector allows scanning and vulnerability assessment, while the others serve different functions.
A company needs to ensure its EC2 instances recover quickly from failures. What should they implement?
A
Lifecycle Hooks
B
Auto Scaling Groups
C
Amazon CloudFront
D
AWS Firewall Manager
Auto Scaling Groups can automatically replace failed instances, unlike the other options.
What happens when an S3 bucket policy is set to allow public access?
A
All files remain private
B
Anyone can access files
C
Bucket is deleted
D
Versioning is enabled automatically
A public access policy grants file access to anyone, while the other statements are not true.
Which AWS service is ideal for scalable object storage?
A
Amazon S3
B
Amazon EC2
C
Amazon RDS
D
AWS Lambda
Amazon S3 is designed for object storage, while the others serve different purposes.
A company needs to securely share documents via URL without exposing them to public access. Which AWS feature should they use?
A
Pre-signed URLs
B
CloudFront
C
S3 Public Access
D
IAM Policies
Pre-signed URLs allow temporary access without exposing public access.