Design secure workloads and applications.
35 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
35 total · page 1 of 2How Can You Get 30-Day Notice Before Imported ACM Certificate Expiry?
Imported ACM certificates do not renew automatically, so the security team needs a reliable expiry notification mechanism. This page establishes that
Ensuring Ordered Order Processing with SQS FIFO
This SAA-C03 question asks how an ecommerce application can guarantee that orders arriving through an Amazon API Gateway REST API are processed in exa
Aurora Multi-AZ Auto Scaling for Read-Heavy Ecommerce DB
This SAA-C03 scenario asks how to replace a struggling self-managed MySQL EC2 database with a service that scales read capacity automatically and stay
Decoupling Lambda Ingestion and Aurora Writes with SQS
The scenario asks how to absorb high-volume data ingestion into Aurora PostgreSQL without inflating AWS Lambda concurrency quotas, while keeping confi
AWS Forecast vs SageMaker for Time-Series Prediction
This question tests the selection of a managed time-series forecasting service for manufacturing resource prediction using historical S3 data. The cor
AWS Transfer Family with Amazon EFS for Batch Processing
This question evaluates the design of a highly available, low-operational-effort SFTP solution using AWS Transfer Family and Amazon EFS to support nig
Cost-Effective Scaling for Monolithic EC2 App
This question addresses resolving CPU bottlenecks and improving availability for a monolithic application using AWS Compute Optimizer and Auto Scaling
How Do You Add Static IPs and AWS WAF to a Multi-Region HTTP App?
A global HTTP application running on EC2 in multiple Regions must simultaneously gain performance, high availability, AWS WAF protection against web e
Least Implementation Effort for Web Portal and Document Extraction
This scenario evaluates the ability to design a cost-effective, scalable solution for infrequent document processing while maintaining high availabili
AWS Control Tower Proactive Controls for CloudFormation
This question tests the use of AWS Control Tower proactive controls to enforce compliance policies before AWS CloudFormation resources are deployed, s
Which ACM Certificate Lets CloudFront Use a Custom Domain for Free?
Amazon CloudFront requires an ACM public certificate issued in the us-east-1 Region before you can attach a custom (alternate) domain name to a distri
Designing Highly Available and Scalable EC2 and MySQL Solutions
This guide explains how to design a highly available and automatically scalable architecture for Amazon EC2 applications and MySQL databases using AWS
Automating OS Patching and Vulnerability Scanning with AWS Systems Manager
This question addresses the automation of operating system patching and vulnerability assessment for a hybrid fleet of Windows and Linux EC2 instances
Serverless Docker Container with Temporary Storage
This page explains how to design a serverless architecture for Docker containers requiring temporary storage using Amazon ECS Fargate and EFS, address
Blocking Malicious IPs with AWS WAF and CloudFront
This question tests the correct configuration of AWS WAF to block specific IP addresses at the edge. The correct action is modifying the Web ACL assoc
AWS Lambda for Serverless Microservices in SAA-C03
This question tests the design of serverless microservices using AWS Lambda to meet requirements for Python support, automatic scaling, and minimal op
Event-Driven Image Processing with Lambda and SQS
This question tests designing a cost-effective, event-driven architecture for processing S3 uploads using AWS Lambda and Amazon SQS. The correct solut
AWS Outposts for Local Data Compliance
AWS Outposts extends AWS infrastructure to on-premises data centers, enabling local data residency while using managed services like EKS. This solutio
Cost-Effective Ingredient Extraction from S3
This question evaluates the selection of AWS services for text analysis without custom machine learning development, highlighting Amazon Comprehend as
Serverless Payment App: Lambda & ECS Fargate for Least Overhead
This question tests designing a serverless architecture using AWS Lambda for validation and Amazon ECS with Fargate for long-running backend processin