Design secure workloads and applications.
35 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
35 total · page 2 of 2Which ALB Security Group Rules Enable HTTPS and Port 8443 Health Checks?
An internet-facing Application Load Balancer needs security group rules that accept public HTTPS on port 443 and send HTTPS to EC2 targets on both 443
Migrating Kubernetes with AMQP to AWS
Migrating a Kubernetes application using AMQP to AWS requires selecting services that support the existing protocols and orchestration to minimize ope
Amazon EKS with Fargate for Least Operational Overhead
This question tests the selection of serverless container compute options in Amazon EKS to minimize management overhead. The correct solution utilizes
Running Stateful Jobs on AWS Fargate with EventBridge
This question evaluates the selection of AWS compute services for stateful, long-running scheduled tasks. The correct solution leverages Amazon ECS on
Cost-Effective Serverless Contact Form on S3
This question evaluates the design of a cost-effective serverless architecture for a low-traffic static website requiring dynamic form processing and
Amazon ECR Scan on Push for CVE Scanning
This question tests the integration of Amazon ECR with ECS to achieve automated container image scanning with minimal workload modifications. It estab
Preventing Unwanted Image Uploads Without ML Training
This question tests the correct AWS service for content moderation of images without custom model training. The solution requires using Amazon Rekogni
AWS Fargate Persistent Storage with EFS
Determines the correct managed service and storage solution for stateful Docker containers on AWS without managing servers. Establishes that Amazon EC
AWS Systems Manager Patching with ALB IP Target Groups
Resolves errors when patching EC2 instances behind an Application Load Balancer using IP-based target groups by leveraging specific Automation documen
Least Operational Overhead for ASP.NET Containerization
This page explains how to modernize an on-premises ASP.NET application to containers with minimal operational overhead using AWS App2Container and Ama
Amazon CloudWatch Detailed Monitoring Granularity
This question tests the specific monitoring granularity provided by Amazon EC2 detailed monitoring. It establishes that enabling detailed monitoring i
Migrating SQL Server to AWS with Reduced Overhead
This question evaluates the selection of a managed database service that reduces operational overhead while maintaining relational capabilities and se
How Do You Auto-Detect and Respond to Threats with GuardDuty and WAF?
AWS WAF only filters HTTP traffic, so the missing piece is a service that watches the whole AWS environment for malicious behavior and can trigger an
AWS Security Hub for Multi-Account Compliance Monitoring
This question addresses how to centrally monitor compliance with NIST and PCI DSS standards across hundreds of AWS accounts using AWS Organizations. T
Reduce Aurora Failover Time with RDS Proxy
Amazon RDS Proxy is the correct solution to reduce database connection errors and improve failover resilience for Amazon Aurora MySQL by pooling conne