Amazon AWS
AWS Certified Solutions Architect – Associate
SAA-C03
The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Questions 381–390 of 483
What happens when you enable termination protection on an EC2 instance?
A
Instance cannot be terminated
B
Cannot stop the instance
C
Cannot reboot the instance
D
Memory allocation is increased
Termination protection prevents accidental termination; stopping and rebooting are still allowed and memory remains unchanged.
Which service helps manage infrastructure as code?
A
AWS CloudFormation
B
Amazon S3
C
AWS IAM
D
Amazon RDS
AWS CloudFormation allows management of resources via templates, while the others serve different purposes.
A company needs to analyze large datasets with minimal ongoing administration. Which service should they use?
A
Amazon DynamoDB
B
Amazon Athena
C
AWS Lambda
D
Amazon Redshift
Amazon Athena allows serverless analysis of data in S3, unlike the others which require more management.
You are configuring an S3 bucket policy. What happens when you deny access to an IAM role that has a permission to access the bucket?
A
The role gains access to the bucket.
B
Access is denied regardless of permissions.
C
Users can still access the bucket.
D
The bucket becomes publicly available.
Denying access overrides any permissions granted to the role, ensuring access is refused.
Which service allows you to run code without provisioning servers?
A
AWS Lambda
B
Amazon EC2
C
AWS Elastic Beanstalk
D
AWS ECS
AWS Lambda executes code automatically without server management, while the others require provisioning of servers.
A company needs to automatically back up their Amazon RDS database. Which feature should they enable?
A
Snapshots
B
Multi-AZ
C
Read Replicas
D
Database Migration Service
Snapshots automate RDS backups, while the others serve different purposes.
You are configuring an IAM policy for a group of users. What happens if you specify an explicit deny?
A
Always allowed
B
Always denied
C
Overrides all permissions
D
Depends on permissions
Explicit denies take precedence and override any permissions granted.
Which AWS service enables you to run containerized applications at scale?
A
AWS Fargate
B
AWS Lambda
C
AWS EC2
D
AWS S3
AWS Fargate is specifically for running containers, while the others serve different purposes.
A company needs to ensure that their IAM Users cannot delete S3 buckets. What policy should be applied?
A
Allow s3:DeleteBucket
B
Deny s3:DeleteBucket
C
Allow s3:ListBucket
D
Deny s3:PutObject
Denying 's3:DeleteBucket' specifically prevents deletion, while the others do not.
What happens when you configure a CloudFormation stack with a resource that already exists?
A
Stack creation fails immediately
B
Resource is ignored
C
Stack updates the existing resource
D
Resource is deleted during creation
If a resource already exists and conflicts, the stack creation will indeed fail immediately.