Amazon AWS
AWS Certified Solutions Architect – Associate
SAA-C03
The AWS Certified Solutions Architect – Associate (SAA-C03) exam tests your ability to design distributed systems on AWS. It is one of the most sought-after certifications in the cloud domain.
Questions 41–50 of 483
A company needs temporary access to AWS resources for an external partner. What should they implement?
A
IAM Roles with AssumeRole
B
IAM Users with passwords
C
AWS Organizations
D
S3 Bucket Policies
IAM Roles with AssumeRole provide temporary access, while other options are incorrect for temporary access purposes.
What happens when an Auto Scaling group reaches its desired capacity?
A
No additional instances are launched
B
Instances are terminated if under-load
C
More instances are launched immediately
D
All instances are put to sleep
The Auto Scaling group maintains balance; it won't launch more instances if desired capacity is met.
Which service allows you to run containerized applications without managing servers?
A
AWS Fargate
B
EC2
C
S3
D
CloudFormation
AWS Fargate abstracts server management, unlike EC2 and others.
A company needs to encrypt its Amazon S3 bucket data at rest and manage its encryption keys. Which AWS service should they primarily use?
A
AWS Shield
B
AWS Key Management Service
C
AWS CloudTrail
D
AWS Config
AWS KMS manages keys for S3 encryption at rest.
What happens when you configure an AWS Lambda function with a VPC?
A
It gains internet access.
B
It loses internet access unless specified.
C
It only runs in public subnets.
D
It cannot access other AWS services.
Lambda loses internet access without NAT configuration.
Which service provides a fully managed graph database?
A
Amazon Neptune
B
Amazon RDS
C
Amazon DynamoDB
D
Amazon Redshift
Amazon Neptune is designed specifically for graph databases, unlike the others which serve different database models.
A company needs to automatically scale its EC2 instances based on traffic patterns. Which solution is best?
A
Use an Auto Scaling group
B
Increase instance size manually
C
Implement Amazon S3
D
Use AWS Lambda for scaling
Auto Scaling groups efficiently manage instance scaling based on demand, unlike other methods listed.
What happens when you launch an EC2 instance in a public subnet with a public IP?
A
Only intranet access is possible
B
It cannot connect to the internet
C
It can communicate externally
D
No inbound traffic is allowed
A public subnet with a public IP allows external internet communication, while the other options misinterpret subnet behavior.
Which service allows for automatic scaling of EC2 instances?
A
Auto Scaling
B
Elastic Beanstalk
C
CloudFormation
D
Lambda
Auto Scaling automatically adjusts the number of EC2 instances. The other options involve deployment or management, not automatic scaling.
A company needs to manage user permissions for AWS resources at a granular level. Which AWS service should they use?
A
IAM
B
CloudTrail
C
Cognito
D
S3
IAM provides detailed permission control for AWS resources. The others do not primarily focus on permissions management.