AWS Solutions Architect
Associate SAA-C03
(2025-2026)
Question and Answers
Expert Verified
(With A+ Grades Guarantee)
,What is AWS? A cloud provider - provides you with servers and
services that you can use on demand and scale
easily
What are AWS Regions? A cluster of data centers
Most services are going to be scoped to a region
us-east-1, eu-west-3
How do you chose a AWS Region? 1. Compliance - if data needs to be local to the
country
2. Latency - have your data where the customers
are for reduced latency
3. Availability - Not all regions have all services
4. Pricing - varied by region
What are AWS Availability Zones? * Each region has a minimum of 3 AZs with a max of
6 (typically 3)
* Each AZ is one or more discrete DCs with
redundant power, networking, and connectivity
* Separate geographically to be isolated from
disasters
* connected with high bandwidth - ultra-low latency
networking
Ex: Sydney Australia
ap-southeast-2a, ap-southeast-2b, ap-southeast-2c
What are AWS points of presence Content is delivered to end users with the lowest
(Edge Locations)? latency possible
400+ PoP and 10+ regional Caches in 90+ cities
across 40+ countries
List AWS Global Services * Identity and Access Management (IAM)
* Route 53 (DNS)
* CloudFront (Content Delivery Network)
* Web Application Firewall (WAF)
This is not very common
List AWS Region Scoped services * EC2 (infrastructure as a service)
* Elastic Beanstalk (platform as a service)
* Lambda (function as a service)
* Rekognition (Software as a service)
etc. Most services are region-scoped
,What is IAM? Identity and Access Management
What is the difference between root Root user should only be used to set up the account
account and users?
Users are people within your organization
What can IAM Groups contain? users not other groups
What are the rules on IAM groups Users don't have to be in groups
and users? One user can be in multiple groups
What are IAM Permissions? Users or groups can be assigned json documents
called policies
These policies define the permissions of the users
In AWS you apply the least privilege principle
What is an inline IAM policy? permissions that only apply to one user
IAM Policy Structure version: policy language "2023-01-14" (always
included)
Id: an identifier for the policy (optional)
Statement: one or more individual statements
* SID: an identifier for the statement (optional)
* Effect: whether the statement allows or denies
access (Allow, Deny)
* Principal: account/user/role to which this policy
applies to
* Action: list of actions this policy allows or denies
* Resource: list of resources to which the action
applies to
* Condition: for when this policy is in effect (optional)
, List some things you can do in the Set a minimum pw length
IAM - Password Policy require character types
allow users to change their own passwords
require users to change their pas after sometime
prevent pw reuse
strong passwords = more secure
What is MFA? And what is the benefit Multi Factor Authentication
combo of pw you know and a security device you
own
benefit: even if she lost her pw or was hacked they
wouldn't be able to log in without her device
What are the different types of MFA? Virtual MFA (apps)
* Google authenticator - phone only
* Authy - support for multiple tokens on a single
device
Universal 2nd factor (U2F) Security Key - physical
device supports multiple root and IAM users using a
single security key (3rd party)
Hardware key fob MFA Device (3rd party)
Hardware Key Fob MFA Device for AWS GovCloud
(US) (3rd party)
What are 3 ways users can access AWS Management console: protected by pw and
AWS and how are they protected? MFA
AWS Command Line Interface (CLI): protected by
access keys
AWS Software Developer Kit (SDK): for coding -
protected by access keys
What are IAM Access Keys? Used to login to CLI or SDK
users manage their own access keys in the AWS
Console
these are secret just like a pw
What is the AWS CLI? A tool that enables you to interact with AWS
Services using the command line
direct access to the public APIs of AWS
You can develop scripts to manage your resources
it is open source
Alternative to AWS console
Associate SAA-C03
(2025-2026)
Question and Answers
Expert Verified
(With A+ Grades Guarantee)
,What is AWS? A cloud provider - provides you with servers and
services that you can use on demand and scale
easily
What are AWS Regions? A cluster of data centers
Most services are going to be scoped to a region
us-east-1, eu-west-3
How do you chose a AWS Region? 1. Compliance - if data needs to be local to the
country
2. Latency - have your data where the customers
are for reduced latency
3. Availability - Not all regions have all services
4. Pricing - varied by region
What are AWS Availability Zones? * Each region has a minimum of 3 AZs with a max of
6 (typically 3)
* Each AZ is one or more discrete DCs with
redundant power, networking, and connectivity
* Separate geographically to be isolated from
disasters
* connected with high bandwidth - ultra-low latency
networking
Ex: Sydney Australia
ap-southeast-2a, ap-southeast-2b, ap-southeast-2c
What are AWS points of presence Content is delivered to end users with the lowest
(Edge Locations)? latency possible
400+ PoP and 10+ regional Caches in 90+ cities
across 40+ countries
List AWS Global Services * Identity and Access Management (IAM)
* Route 53 (DNS)
* CloudFront (Content Delivery Network)
* Web Application Firewall (WAF)
This is not very common
List AWS Region Scoped services * EC2 (infrastructure as a service)
* Elastic Beanstalk (platform as a service)
* Lambda (function as a service)
* Rekognition (Software as a service)
etc. Most services are region-scoped
,What is IAM? Identity and Access Management
What is the difference between root Root user should only be used to set up the account
account and users?
Users are people within your organization
What can IAM Groups contain? users not other groups
What are the rules on IAM groups Users don't have to be in groups
and users? One user can be in multiple groups
What are IAM Permissions? Users or groups can be assigned json documents
called policies
These policies define the permissions of the users
In AWS you apply the least privilege principle
What is an inline IAM policy? permissions that only apply to one user
IAM Policy Structure version: policy language "2023-01-14" (always
included)
Id: an identifier for the policy (optional)
Statement: one or more individual statements
* SID: an identifier for the statement (optional)
* Effect: whether the statement allows or denies
access (Allow, Deny)
* Principal: account/user/role to which this policy
applies to
* Action: list of actions this policy allows or denies
* Resource: list of resources to which the action
applies to
* Condition: for when this policy is in effect (optional)
, List some things you can do in the Set a minimum pw length
IAM - Password Policy require character types
allow users to change their own passwords
require users to change their pas after sometime
prevent pw reuse
strong passwords = more secure
What is MFA? And what is the benefit Multi Factor Authentication
combo of pw you know and a security device you
own
benefit: even if she lost her pw or was hacked they
wouldn't be able to log in without her device
What are the different types of MFA? Virtual MFA (apps)
* Google authenticator - phone only
* Authy - support for multiple tokens on a single
device
Universal 2nd factor (U2F) Security Key - physical
device supports multiple root and IAM users using a
single security key (3rd party)
Hardware key fob MFA Device (3rd party)
Hardware Key Fob MFA Device for AWS GovCloud
(US) (3rd party)
What are 3 ways users can access AWS Management console: protected by pw and
AWS and how are they protected? MFA
AWS Command Line Interface (CLI): protected by
access keys
AWS Software Developer Kit (SDK): for coding -
protected by access keys
What are IAM Access Keys? Used to login to CLI or SDK
users manage their own access keys in the AWS
Console
these are secret just like a pw
What is the AWS CLI? A tool that enables you to interact with AWS
Services using the command line
direct access to the public APIs of AWS
You can develop scripts to manage your resources
it is open source
Alternative to AWS console
