Design secure access to AWS resources.
98 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
98 total · page 5 of 5How to Keep On-Premises AD Authentication for SFTP on AWS?
Migrating an on-premises SFTP workflow to AWS while preserving Active Directory authentication requires AWS Transfer Family with an SFTP endpoint plus
Most Cost-Effective AWS Connection for Low-Bandwidth On-Premises Link?
This SAA-C03 scenario asks for the most cost-effective way to connect a low-traffic on-premises environment to AWS quickly, and the answer is an AWS S
AWS IAM Identity Center with External IdP for Multi-Account Access
This question tests the correct method to federate access from an existing identity provider across multiple AWS accounts using AWS IAM Identity Cente
Migrating DNS to Amazon Route 53 Public Hosted Zone
This guide explains how to rapidly migrate a company's domain name records from an external provider to the resilient managed DNS service, Amazon Rout
Protect EC2 and RDS from SQL Injection with Least Overhead
AWS WAF is the correct solution to protect web applications against SQL injection and other web-based attacks with minimal operational overhead.
Private EC2 to S3 Connection with VPC Endpoint
Learn how to establish a private and secure connection between Amazon EC2 instances and Amazon S3 using VPC Endpoints, ensuring traffic never traverse
How to Reach S3 from a Private Subnet Without Internet?
A private-subnet application that must call the Amazon S3 API without internet traffic should use an S3 gateway endpoint attached to the VPC route tab
How Do You Securely Give a Private-Subnet App Cognito-Based S3 Access?
A private-subnet application already authenticates users with an Amazon Cognito user pool and now needs secure per-user access to Amazon S3. The corre
Automate Database Credential Rotation with AWS Secrets Manager
This page explains how to securely manage and rotate Amazon Aurora MySQL credentials using AWS Secrets Manager to meet strict security mandates with m
Secure On-Premises to RDS Connectivity
This question tests the design of secure database access from on-premises environments using AWS Site-to-Site VPN and Private Subnets. It establishes
Securely Managing Database Credentials with AWS Secrets Manager
This question evaluates the best practice for securely managing and rotating database credentials when migrating to AWS Lambda and RDS, identifying AW
Mitigating RDS Single Point of Failure with Least Effort
This question tests how to eliminate a single point of failure for an Amazon RDS MySQL instance while minimizing implementation effort. The correct ap
Least Overhead IAM Permission Review in AWS Organizations
Use AWS IAM Access Analyzer to identify excessive permissions for IAM users across multiple accounts with minimal administrative overhead. This tool a
Least Privilege S3 Access for AWS Lambda
This question tests the design of secure access to AWS resources using IAM roles and least privilege principles. The correct solution involves assigni
Which AWS Direct Connect Design Provides Maximum Resiliency?
Maximum resiliency for AWS Direct Connect means redundant connections from every data center, terminating at two separate Direct Connect locations on
How Do You Give an External Consultant 7-Day Access to One S3 Report?
Sharing a single Amazon S3 object with an external auditor for a fixed 7-day window is best solved with a presigned URL, which scopes time-limited acc
Least-Overhead Password Rotation for Amazon RDS for PostgreSQL?
Password rotation for Amazon RDS for PostgreSQL is a credential-management task, and AWS Secrets Manager is the only service in these options that pro
AWS AppConfig and Secrets Manager for Least Overhead
This question evaluates the optimal AWS services for managing application configuration and securely handling database credentials with minimal admini