Amazon AWS
AWS Certified Solutions Architect – Associate
SAA-C03
The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Questions 431–440 of 483
You are configuring an S3 bucket for public access. What should you do to prevent unauthorized write access?
A
Apply bucket policy to deny all writes
B
Set bucket to ‘private’
C
Enable object versioning
D
Use MFA for all writes
A bucket policy can specifically deny unauthorized writes, while the other options do not directly control write access.
A company needs to quickly retrieve data in cloud storage. Which should they use for maximum speed?
A
Amazon S3 Standard
B
AWS Glacier
C
Amazon EBS
D
AWS Snowball
Amazon EBS provides low-latency access to data, while others are slower options for different use cases.
Which service is used for scalable file storage in AWS?
A
Amazon S3
B
Amazon EC2
C
Amazon RDS
D
Amazon DynamoDB
Amazon S3 provides scalable object storage, not the other services.
A company needs to run a serverless application. Which AWS service should they choose?
A
Amazon EC2
B
AWS Lambda
C
Amazon RDS
D
AWS Elastic Beanstalk
AWS Lambda allows serverless computing, unlike the others.
What happens when an Amazon EC2 instance is terminated?
A
Instance data is permanently lost
B
Instance can be restarted later
C
Instance data is saved automatically
D
Only instance configuration is lost
Terminating an EC2 instance permanently deletes its data, unlike the other options.
Which service enables serverless compute for containers?
A
AWS Lambda
B
AWS Fargate
C
ECS on EC2
D
Elastic Beanstalk
AWS Fargate runs containers without managing servers, unlike the others which require server management.
A company needs to provide temporary access to AWS resources to external partners. Which service should they use?
A
IAM Roles
B
AWS Organizations
C
AWS SSO
D
CloudTrail
IAM Roles allow temporary access for external partners without creating individual IAM users.
You are configuring a VPC. What happens when you create a subnet without an associated route table?
A
Subnet cannot send network traffic
B
Allows all inbound traffic
C
Data is automatically routed externally
D
It behaves like a public subnet
Without an associated route table, network traffic cannot be routed, blocking all outbound communication.
Which AWS service is optimized for serverless applications?
A
AWS Lambda
B
Amazon EC2
C
Amazon RDS
D
AWS Elastic Beanstalk
AWS Lambda allows you to run code without provisioning servers, making it optimal for serverless applications.
You are configuring a VPC peering connection. Which statement is true?
A
Traffic must go over the internet.
B
Peered VPCs can share security groups.
C
Communication is private and secure.
D
CIDR blocks must not overlap.
Traffic between peered VPCs is private and secure not traversing the public internet.