NEWEST AWS CERTIFIED
SOLUTIONS ARCHITECT –
ASSOCIATE EXAM | Q&A WITH
RATIONALES
1. Which of the following is the primary
responsibility of a Solutions Architect according
to the AWS Well-Architected Framework?
A) To write code for applications
B) To design secure, resilient, high-performing,
and cost-optimized solutions
C) To manage physical data center hardware
D) To configure network routers and switches
Correct answer: B
Rationale: The Solutions Architect is
responsible for designing solutions that align
with the five pillars of the AWS Well-Architected
Framework: Operational Excellence, Security,
Reliability, Performance Efficiency, and Cost
Optimization.
,2. Which of the following is the correct
weighting of the Design Resilient Architectures
domain on the SAA-C03 exam?
A) 20%
B) 24%
C) 26%
D) 30%
Correct answer: C
Rationale: The Design Resilient Architectures
domain accounts for 26% of the exam. Design
Cost-Optimized is 20%, Design High-Performing
is 24%, and Design Secure Architectures is
30%.
3. A company needs a highly available
architecture that can automatically recover
from a failure in an Availability Zone. Which of
the following strategies should be
implemented?
A) Deploy resources in a single Availability Zone
with a larger instance size
,B) Deploy resources across multiple Availability
Zones with Auto Scaling and an Elastic Load
Balancer
C) Deploy resources in multiple Regions with
read replicas
D) Deploy resources on a single EC2 instance
with daily backups
Correct answer: B
Rationale: Deploying across multiple Availability
Zones with Auto Scaling and a load balancer
provides high availability by distributing the
load and automatically replacing unhealthy
instances.
4. What is the maximum validity period of an
AWS Certificate Manager (ACM) certificate?
A) 90 days
B) 1 year
C) 13 months
D) 3 years
Correct answer: C
, Rationale: ACM certificates cannot be imported
with a validity period greater than 13 months.
5. An architect is designing a system that must
encrypt data at rest. Which AWS service can be
used to centrally manage encryption keys?
A) AWS Certificate Manager (ACM)
B) AWS Identity and Access Management (IAM)
C) AWS Key Management Service (KMS)
D) AWS CloudTrail
Correct answer: C
Rationale: AWS Key Management Service (KMS)
is a managed service that enables you to create
and control the encryption keys used to encrypt
your data.
6. A company has a static website hosted on an
S3 bucket and wants to direct traffic from
apex.example.com to www.example.com. Which
of the following AWS services should be used to
achieve this?
SOLUTIONS ARCHITECT –
ASSOCIATE EXAM | Q&A WITH
RATIONALES
1. Which of the following is the primary
responsibility of a Solutions Architect according
to the AWS Well-Architected Framework?
A) To write code for applications
B) To design secure, resilient, high-performing,
and cost-optimized solutions
C) To manage physical data center hardware
D) To configure network routers and switches
Correct answer: B
Rationale: The Solutions Architect is
responsible for designing solutions that align
with the five pillars of the AWS Well-Architected
Framework: Operational Excellence, Security,
Reliability, Performance Efficiency, and Cost
Optimization.
,2. Which of the following is the correct
weighting of the Design Resilient Architectures
domain on the SAA-C03 exam?
A) 20%
B) 24%
C) 26%
D) 30%
Correct answer: C
Rationale: The Design Resilient Architectures
domain accounts for 26% of the exam. Design
Cost-Optimized is 20%, Design High-Performing
is 24%, and Design Secure Architectures is
30%.
3. A company needs a highly available
architecture that can automatically recover
from a failure in an Availability Zone. Which of
the following strategies should be
implemented?
A) Deploy resources in a single Availability Zone
with a larger instance size
,B) Deploy resources across multiple Availability
Zones with Auto Scaling and an Elastic Load
Balancer
C) Deploy resources in multiple Regions with
read replicas
D) Deploy resources on a single EC2 instance
with daily backups
Correct answer: B
Rationale: Deploying across multiple Availability
Zones with Auto Scaling and a load balancer
provides high availability by distributing the
load and automatically replacing unhealthy
instances.
4. What is the maximum validity period of an
AWS Certificate Manager (ACM) certificate?
A) 90 days
B) 1 year
C) 13 months
D) 3 years
Correct answer: C
, Rationale: ACM certificates cannot be imported
with a validity period greater than 13 months.
5. An architect is designing a system that must
encrypt data at rest. Which AWS service can be
used to centrally manage encryption keys?
A) AWS Certificate Manager (ACM)
B) AWS Identity and Access Management (IAM)
C) AWS Key Management Service (KMS)
D) AWS CloudTrail
Correct answer: C
Rationale: AWS Key Management Service (KMS)
is a managed service that enables you to create
and control the encryption keys used to encrypt
your data.
6. A company has a static website hosted on an
S3 bucket and wants to direct traffic from
apex.example.com to www.example.com. Which
of the following AWS services should be used to
achieve this?
