CLOUDPUZ
AWS Certified
Solutions Architect -
Associate
SAA-C03
150 Practice Questions
Answers & Detailed Explanations
2 practice tests • 75 questions per test • English
Independent study material for certification preparation. This publication is not affiliated with or endorsed by Amazon Web
Services. AWS and related names are trademarks of their respective owners.
Practice questions for learning and revision; no claim is made that these are live certification exam questions.
CLOUDPUZ | SAA-C03 | Practice questions & answers 1
, How to use this question bank
Complete each practice test before consulting its answer key. Select one answer unless the
question specifies multiple answers. Review the explanations for every option, then revisit the
topics you missed.
Each test has three sections: Questions, Quick answer key, and Answers with explanations.
Question numbering restarts at 1 for Test 2.
The questions and explanations retain the content of the Cloudpuz source question banks. Official reference links supplied
in those banks are preserved for further study. Service capabilities and exam objectives may evolve.
CLOUDPUZ | SAA-C03 | Practice questions & answers 2
, Practice Test 1
Questions 1-75
Question 1 | Design Resilient Architectures
A Linux fleet needs a shared file system that remains available across AZs. Which storage choice
fits?
A. One EBS volume assumed to span multiple AZs
B. Regional Amazon EFS
C. One instance's local filesystem exported without redundancy
D. A temporary directory on a Spot instance
Select 1 answer.
Question 2 | Design Resilient Architectures
A regional service quota prevents an Auto Scaling group from launching additional instances
during a spike. What should be done before predictable growth?
A. Disable monitoring during the event
B. Assume scaling policies bypass all quotas
C. Review relevant quotas and request increases where needed
D. Only rename the launch template
Select 1 answer.
Question 3 | Design Cost-Optimized Architectures
Private EC2 instances frequently access S3 through a NAT gateway. Which change can avoid NAT
data-processing charges for supported S3 traffic?
A. Increase CloudWatch log retention
B. Use an S3 gateway endpoint with appropriate routing
C. Add a second NAT gateway solely for lower total processing
D. Send requests through a distant Region
Select 1 answer.
CLOUDPUZ | SAA-C03 | Practice questions & answers 3
, Question 4 | Design High-Performing Architectures
A high-performance computing cluster requires low-latency communication between closely
coupled EC2 nodes. Which placement strategy should be considered?
A. Cluster placement group
B. Random public DNS names
C. Spread placement group solely to maximize physical separation
D. Multiple distant Regions for every node
Select 1 answer.
Question 5 | Design Secure Architectures
A company requires administrator shell access to EC2 without opening inbound SSH ports or
maintaining bastion hosts. Which option fits?
A. An internet-facing SSH listener on every instance
B. A public S3 bucket containing private keys
C. Route 53 latency routing
D. Systems Manager Session Manager with required IAM and connectivity
Select 1 answer.
Question 6 | Design Secure Architectures
Two VPCs in separate accounts need private access to one specific internal service without full
network connectivity between VPCs. Which design is a strong fit?
A. A public S3 bucket containing the service URL
B. An internet gateway on the consumer VPC only
C. AWS PrivateLink with a supported endpoint service
D. Full-mesh peering as the only possible option
Select 1 answer.
Question 7 | Design Secure Architectures
A team needs to discover unintended public and cross-account access granted by supported
resource policies. Which service is relevant?
A. Amazon Inspector
B. AWS Cost Explorer
C. IAM Access Analyzer
D. AWS Budgets
Select 1 answer.
CLOUDPUZ | SAA-C03 | Practice questions & answers 4
AWS Certified
Solutions Architect -
Associate
SAA-C03
150 Practice Questions
Answers & Detailed Explanations
2 practice tests • 75 questions per test • English
Independent study material for certification preparation. This publication is not affiliated with or endorsed by Amazon Web
Services. AWS and related names are trademarks of their respective owners.
Practice questions for learning and revision; no claim is made that these are live certification exam questions.
CLOUDPUZ | SAA-C03 | Practice questions & answers 1
, How to use this question bank
Complete each practice test before consulting its answer key. Select one answer unless the
question specifies multiple answers. Review the explanations for every option, then revisit the
topics you missed.
Each test has three sections: Questions, Quick answer key, and Answers with explanations.
Question numbering restarts at 1 for Test 2.
The questions and explanations retain the content of the Cloudpuz source question banks. Official reference links supplied
in those banks are preserved for further study. Service capabilities and exam objectives may evolve.
CLOUDPUZ | SAA-C03 | Practice questions & answers 2
, Practice Test 1
Questions 1-75
Question 1 | Design Resilient Architectures
A Linux fleet needs a shared file system that remains available across AZs. Which storage choice
fits?
A. One EBS volume assumed to span multiple AZs
B. Regional Amazon EFS
C. One instance's local filesystem exported without redundancy
D. A temporary directory on a Spot instance
Select 1 answer.
Question 2 | Design Resilient Architectures
A regional service quota prevents an Auto Scaling group from launching additional instances
during a spike. What should be done before predictable growth?
A. Disable monitoring during the event
B. Assume scaling policies bypass all quotas
C. Review relevant quotas and request increases where needed
D. Only rename the launch template
Select 1 answer.
Question 3 | Design Cost-Optimized Architectures
Private EC2 instances frequently access S3 through a NAT gateway. Which change can avoid NAT
data-processing charges for supported S3 traffic?
A. Increase CloudWatch log retention
B. Use an S3 gateway endpoint with appropriate routing
C. Add a second NAT gateway solely for lower total processing
D. Send requests through a distant Region
Select 1 answer.
CLOUDPUZ | SAA-C03 | Practice questions & answers 3
, Question 4 | Design High-Performing Architectures
A high-performance computing cluster requires low-latency communication between closely
coupled EC2 nodes. Which placement strategy should be considered?
A. Cluster placement group
B. Random public DNS names
C. Spread placement group solely to maximize physical separation
D. Multiple distant Regions for every node
Select 1 answer.
Question 5 | Design Secure Architectures
A company requires administrator shell access to EC2 without opening inbound SSH ports or
maintaining bastion hosts. Which option fits?
A. An internet-facing SSH listener on every instance
B. A public S3 bucket containing private keys
C. Route 53 latency routing
D. Systems Manager Session Manager with required IAM and connectivity
Select 1 answer.
Question 6 | Design Secure Architectures
Two VPCs in separate accounts need private access to one specific internal service without full
network connectivity between VPCs. Which design is a strong fit?
A. A public S3 bucket containing the service URL
B. An internet gateway on the consumer VPC only
C. AWS PrivateLink with a supported endpoint service
D. Full-mesh peering as the only possible option
Select 1 answer.
Question 7 | Design Secure Architectures
A team needs to discover unintended public and cross-account access granted by supported
resource policies. Which service is relevant?
A. Amazon Inspector
B. AWS Cost Explorer
C. IAM Access Analyzer
D. AWS Budgets
Select 1 answer.
CLOUDPUZ | SAA-C03 | Practice questions & answers 4
