AWS Certified Solutions Architect - Associate (SAA-C03) — Questions and Answers

Question 1: What is the purpose of AWS Database Migration Service (DMS)?

To replicate data between S3 buckets
To migrate databases to AWS with minimal downtime (Correct answer)
To automatically back up RDS databases
To convert SQL queries to NoSQL format

Correct answer: To migrate databases to AWS with minimal downtime

AWS DMS helps migrate databases to AWS quickly and securely, keeping the source database fully operational during migration to minimize downtime.

Question 2: Which approach best reduces API Gateway costs for a webhook endpoint that triggers CodePipeline executions?

Switch from REST API to HTTP API in API Gateway (Correct answer)
Deploy the API to all available regions
Use a Regional endpoint instead of Edge-optimized
Enable API Gateway caching for webhook responses

Correct answer: Switch from REST API to HTTP API in API Gateway

HTTP APIs in API Gateway cost approximately 71% less than REST APIs and support the same webhook use cases, making them the most cost-effective choice for simple trigger endpoints.

Question 3: Which OSHA standard specifically governs welding, cutting, and brazing safety in general industry?

29 CFR 1926.350
29 CFR 1910.134
29 CFR 1910.252 (Correct answer)
29 CFR 1910.147

Correct answer: 29 CFR 1910.252

29 CFR 1910.252 is the OSHA general industry standard covering welding, cutting, and brazing safety requirements including ventilation, fire prevention, and PPE.

Question 4: An application deployed with AWS Elastic Beanstalk must remain available during deployments with zero downtime. Which deployment policy achieves this?

Rolling
All at once
Immutable
Rolling with additional batch (Correct answer)

Correct answer: Rolling with additional batch

Rolling with additional batch launches extra instances first, ensuring full capacity is maintained throughout the deployment with no downtime.

Question 5: What is Amazon Aurora's storage replication factor across Availability Zones?

4 copies across 2 AZs
3 copies across 3 AZs
2 copies across 2 AZs
6 copies across 3 AZs (Correct answer)

Correct answer: 6 copies across 3 AZs

Aurora automatically replicates data 6 ways across 3 Availability Zones to ensure durability and high availability.

Question 6: Which AWS service is a fully managed data warehouse used for analytics on large datasets?

Amazon RDS
Amazon DynamoDB
Amazon Aurora
Amazon Redshift (Correct answer)

Correct answer: Amazon Redshift

Amazon Redshift is a fully managed, petabyte-scale data warehouse service optimized for complex analytical queries on large datasets.

Question 7: A team's CodeBuild project pulls a large base Docker image (8GB) on every build. What is the most cost-effective solution to reduce build time and data transfer costs?

Pull the image from Docker Hub instead of ECR to avoid transfer fees
Use a smaller CodeBuild compute type to reduce the image pull overhead
Build a custom base image with pre-installed dependencies and store it in ECR, then use CodeBuild Docker layer caching (Correct answer)
Increase the CodeBuild environment disk size

Correct answer: Build a custom base image with pre-installed dependencies and store it in ECR, then use CodeBuild Docker layer caching

A pre-built base image stored in ECR combined with Docker layer caching means CodeBuild only pulls changed layers, drastically reducing build duration and intra-region transfer costs.

Question 8: Which EC2 purchasing option is most appropriate for a fault-tolerant, stateless batch processing workload that can be interrupted and resumed, where minimizing cost is the top priority?

Reserved Instances
Dedicated Instances
Spot Instances (Correct answer)
On-Demand Instances

Correct answer: Spot Instances

Spot Instances use spare EC2 capacity and can be up to 90% cheaper than On-Demand, but can be interrupted with a 2-minute warning. They are ideal for stateless, fault-tolerant workloads like batch jobs that can checkpoint and resume.

Question 9: What is the maximum retention period you can configure for a CloudWatch Log Group?

90 days
Logs are retained indefinitely by default unless a retention policy is set (Correct answer)
1 year
10 years

Correct answer: Logs are retained indefinitely by default unless a retention policy is set

By default, CloudWatch Log Groups retain logs indefinitely; you must explicitly set a retention policy to limit storage duration.

Question 10: A company needs its ECS Fargate service to scale based on CPU utilization. Which ECS Auto Scaling policy type adjusts capacity smoothly with minimal overreaction to brief spikes?

Step scaling based on CloudWatch alarms
Target tracking scaling targeting 70% CPU utilization (Correct answer)
Scheduled scaling based on time-of-day patterns
Simple scaling with a 5-minute cooldown

Correct answer: Target tracking scaling targeting 70% CPU utilization

Target tracking scaling continuously adjusts capacity to maintain a target metric (e.g., 70% CPU), smoothing out brief spikes with built-in scale-in cooldowns.

Question 11: Which of the following AWS services is used to manage and provision computing power in the cloud?

Amazon RDS
Amazon VPC
Amazon EC2 (Correct answer)
Amazon S3

Correct answer: Amazon EC2

Amazon EC2 (Elastic Compute Cloud) provides scalable computing capacity in the AWS cloud. It allows users to provision and manage virtual servers (instances) with various operating systems and hardware configurations, offering flexible and resizable compute resources for virtually any workload.

Question 12: Which type of porosity is characterized by a single large void elongated along the weld axis?

Scattered porosity
Cluster porosity
Wormhole (piping) porosity (Correct answer)
Surface porosity

Correct answer: Wormhole (piping) porosity

Wormhole or piping porosity consists of elongated tubular voids that form parallel to the weld axis due to gas escaping during solidification.

Question 13: Which CloudWatch feature allows you to detect anomalous behavior in metrics using machine learning?

CloudWatch Alarms
CloudWatch Anomaly Detection (Correct answer)
CloudWatch Synthetics
CloudWatch Insights

Correct answer: CloudWatch Anomaly Detection

CloudWatch Anomaly Detection uses ML models to establish a baseline and alerts when metrics deviate significantly from expected patterns.

Question 14: In AWS DevOps practice, what is the purpose of vulnerability scanning?

To identify weaknesses before attackers do (Correct answer)
To replace firewalls
To exploit systems
To slow down network traffic

Correct answer: To identify weaknesses before attackers do

Vulnerability scanning proactively identifies security weaknesses in systems and applications so they can be remediated before exploitation.

Question 15: A Network Load Balancer is configured for a TCP application that requires client IP preservation. Which NLB feature achieves this?

X-Forwarded-For header
Target group stickiness
Proxy Protocol v2 (Correct answer)
Cross-zone load balancing

Correct answer: Proxy Protocol v2

Proxy Protocol v2 prepends a header to TCP connections carrying the original client IP, since NLB operates at Layer 4 without HTTP headers.

Question 16: What is a key advantage of Savings Plans over standard Reserved Instances?

No commitment required
Higher discount always
Greater flexibility across instance families, regions, and even compute services like Lambda and Fargate (Correct answer)
Free data transfer

Correct answer: Greater flexibility across instance families, regions, and even compute services like Lambda and Fargate

Compute Savings Plans apply flexibly across families, regions, OS, and services such as Lambda and Fargate.

Question 17: What is the purpose of a 'runoff tab' used during joint preparation and welding of butt joints?

To extend the weld beyond the base metal ends to ensure full-size weld at the joint ends (Correct answer)
To act as a heat sink preventing distortion at joint ends
To measure the groove angle during fit-up
To preheat the joint ends before welding

Correct answer: To extend the weld beyond the base metal ends to ensure full-size weld at the joint ends

Runoff tabs are temporary extensions welded at the ends of a joint so the weld can start and terminate at full cross-section, avoiding craters and incomplete fusion at the edges.

Question 18: A DevOps team runs nightly integration tests on a fleet of EC2 instances that take 2 hours to complete. Which purchasing option minimizes cost for this predictable workload?

Spot Instances with a defined duration (Correct answer)
On-Demand Instances
Dedicated Hosts
Reserved Instances (1-year, no upfront)

Correct answer: Spot Instances with a defined duration

Spot Instances with a defined duration (now called Spot blocks) are ideal for batch jobs with a known completion time, offering up to 70% savings over On-Demand.

Question 19: In liquid penetrant testing, what is the purpose of the 'developer' step?

To clean the surface before applying penetrant
To fix the penetrant to the surface permanently
To remove excess penetrant from the surface
To draw penetrant out of discontinuities and create a visible indication (Correct answer)

Correct answer: To draw penetrant out of discontinuities and create a visible indication

The developer acts as a blotter to draw trapped penetrant out of discontinuities and spread it on the surface, creating a visible, enlarged indication.

Question 20: Which of the following BEST describes the primary distinction between an Amazon RDS Multi-AZ deployment and an RDS Read Replica?

Multi-AZ is primarily for disaster recovery in another region, while a Read Replica is for high availability in another AZ.
Multi-AZ provides high availability via a standby instance for failover, while a Read Replica provides read scalability. (Correct answer)
A Multi-AZ standby instance can be used for read operations, while a Read Replica cannot.
Multi-AZ uses asynchronous replication for scalability, while a Read Replica uses synchronous replication for durability.

Correct answer: Multi-AZ provides high availability via a standby instance for failover, while a Read Replica provides read scalability.

The core difference lies in their primary purpose. A Multi-AZ deployment is a high-availability solution that uses synchronous replication to maintain a standby instance in a different Availability Zone for automatic failover in case the primary instance fails. A Read Replica is a scalability solution that uses asynchronous replication to create one or more read-only copies of the primary database to handle read-heavy traffic. The Multi-AZ standby instance cannot be used to serve read traffic.

Question 21: When should you choose Amazon DynamoDB over Amazon RDS?

For applications requiring complex SQL joins
For applications needing single-digit millisecond latency at any scale with flexible schema (Correct answer)
For traditional relational workloads with ACID transactions
Only for static website hosting

Correct answer: For applications needing single-digit millisecond latency at any scale with flexible schema

DynamoDB is ideal for applications requiring consistent single-digit millisecond performance at any scale, flexible schemas, and key-value or document data models, while RDS suits traditional relational workloads with complex queries.

Question 22: A welder develops a persistent cough and shortness of breath after months of working with galvanized steel without proper ventilation. This condition is most likely:

Metal fume fever
Manganism
Siderosis
Pneumoconiosis (Correct answer)

Correct answer: Pneumoconiosis

Prolonged inhalation of welding fumes without adequate ventilation can cause pneumoconiosis, a chronic lung disease from accumulated particulate matter.

Question 23: What does enabling MFA on an IAM user require for sign-in?

Only an access key
Only a password
A password plus a one-time code (Correct answer)
A biometric scan only

Correct answer: A password plus a one-time code

MFA requires a second factor, such as a time-based one-time code, in addition to the password.

Question 24: Which Lambda feature enables you to run two versions of a function simultaneously and gradually shift traffic between them to test a new deployment?

Lambda Aliases with weighted routing (Correct answer)
Lambda Provisioned Concurrency
Lambda Layers
Lambda Destinations

Correct answer: Lambda Aliases with weighted routing

Lambda Aliases support weighted routing, allowing you to split traffic between two function versions for canary or blue/green deployments.

Question 25: A company wants to receive an alert when its monthly AWS bill exceeds $500. Which AWS service should they use?

AWS Budgets (Correct answer)
AWS Trusted Advisor
AWS Pricing Calculator
AWS Cost Explorer

Correct answer: AWS Budgets

AWS Budgets lets you set custom cost, usage, or reservation budgets and triggers SNS/email alerts when thresholds are breached. Cost Explorer is for analyzing historical spend, the Pricing Calculator estimates future costs, and Trusted Advisor provides general best-practice recommendations.

Question 26: When welding dissimilar metals with different coefficients of thermal expansion, what primary problem can occur?

Excessive spatter during welding
Lack of fusion at the weld root
Residual stress and distortion upon cooling (Correct answer)
Porosity from gas absorption

Correct answer: Residual stress and distortion upon cooling

Different thermal expansion rates cause unequal contraction upon cooling, generating residual stresses that can lead to cracking or distortion.

Question 27: What does AWS Fargate provide for container workloads?

A managed Git repository
Serverless compute so you don't manage EC2 instances (Correct answer)
A CDN edge network
A relational database engine

Correct answer: Serverless compute so you don't manage EC2 instances

Fargate runs containers without you provisioning or managing the underlying servers.

Question 28: What is the workspace of a robotic manipulator?

The footprint of the robot base
The volume swept by link 1 only
The maximum joint velocity range
The set of all reachable end-effector positions and orientations (Correct answer)

Correct answer: The set of all reachable end-effector positions and orientations

The workspace is the complete set of poses the end-effector can achieve given all joint-limit constraints.

Question 29: How does Aurora Global Database support disaster recovery?

By limiting writes to one AZ
By encrypting all data twice
By replicating to secondary regions with low latency for fast failover (Correct answer)
By storing backups only in S3 Glacier

Correct answer: By replicating to secondary regions with low latency for fast failover

Aurora Global Database replicates to secondary regions, enabling cross-region disaster recovery with low replication lag.

Question 30: Which AWS pricing model allows you to commit to a consistent amount of compute usage (measured in $/hour) for a 1- or 3-year term in exchange for a discount of up to 66% compared to On-Demand pricing?

Spot Instances
Savings Plans (Correct answer)
Reserved Instances
Dedicated Hosts

Correct answer: Savings Plans

Savings Plans offer flexible discounts (up to 66%) in exchange for a commitment to a consistent dollar-per-hour spend over 1 or 3 years. Unlike Reserved Instances, Savings Plans automatically apply to any eligible compute usage (EC2, Fargate, Lambda) regardless of instance family or region.

Question 31: Which consistency model does DynamoDB use by default for read operations?

Sequential consistency
Causal consistency
Eventually consistent (Correct answer)
Strongly consistent

Correct answer: Eventually consistent

DynamoDB reads are eventually consistent by default unless strongly consistent reads are requested.

Question 32: A lifecycle rule transitions objects from S3 Standard to S3 Standard-IA. What is the minimum age an object must be before it can be transitioned?

30 days (Correct answer)
90 days
60 days
1 day

Correct answer: 30 days

AWS requires objects to remain in S3 Standard for at least 30 days before a lifecycle rule can transition them to S3 Standard-IA.

Question 33: A team runs Selenium-based end-to-end tests in CodeBuild that take 45 minutes each. Which optimization reduces cost without sacrificing coverage?

Run all tests on a single large CodeBuild instance in sequence
Increase the CodeBuild timeout limit to reduce retries
Split the test suite and run shards in parallel across multiple smaller CodeBuild instances (Correct answer)
Replace CodeBuild with AWS Device Farm for all browser tests

Correct answer: Split the test suite and run shards in parallel across multiple smaller CodeBuild instances

Parallelizing test shards across multiple smaller instances reduces total wall-clock time (and sometimes total compute cost) while keeping the same test coverage.

Question 34: An SQS queue is used to decouple a producer and consumer. What configuration prevents message loss if the consumer service becomes temporarily unavailable?

Configure a Dead Letter Queue (DLQ) and set appropriate message retention period (Correct answer)
Enable long polling and set VisibilityTimeout to 0
Use FIFO queues with content-based deduplication
Enable SQS delay queues with a 15-minute delay

Correct answer: Configure a Dead Letter Queue (DLQ) and set appropriate message retention period

A DLQ captures messages that fail processing after maximum retries, while message retention period keeps messages available during consumer downtime.

Question 35: When using AWS CodePipeline with a multi-region deployment, which service must be configured in each target region to store pipeline artifacts?

Amazon ECR repository replicated across regions
An Amazon S3 artifact bucket in each target region with appropriate KMS key permissions (Correct answer)
Amazon EFS with cross-region replication
AWS CodeCommit repository mirrored to each region

Correct answer: An Amazon S3 artifact bucket in each target region with appropriate KMS key permissions

CodePipeline requires a regional S3 artifact bucket and matching KMS key in every region where cross-region actions are configured to store and encrypt pipeline artifacts.

Question 36: What condition causes 'cold lapping' (lack of fusion) at the toes of a GMAW weld?

Excessive travel speed with insufficient heat input (Correct answer)
High shielding gas flow rate
Too slow a travel speed
Excessive wire stick-out

Correct answer: Excessive travel speed with insufficient heat input

Cold lapping occurs when travel speed is too fast or heat input is too low, preventing the weld metal from properly fusing with the base material at the toes.

Question 37: A company wants to allow developers to create IAM roles but prevent them from granting more permissions than they themselves have. Which IAM feature enforces this?

Permission Boundaries on the created roles (Correct answer)
Service Control Policies
IAM Policy Simulator
IAM Access Analyzer

Correct answer: Permission Boundaries on the created roles

Requiring developers to attach a permissions boundary when creating roles ensures the new roles cannot exceed the developer's own permission level.

Question 38: A company wants to invalidate specific files cached in CloudFront immediately after a deployment. What is the most efficient approach?

Change the S3 bucket policy to force CloudFront to re-fetch content
Delete and recreate the CloudFront distribution
Update the CloudFront TTL to 0 and wait for the cache to expire naturally
Create an invalidation request specifying the paths of the objects to remove from edge caches (Correct answer)

Correct answer: Create an invalidation request specifying the paths of the objects to remove from edge caches

Submitting a cache invalidation request with specific object paths (e.g., /images/logo.png or /*) forces CloudFront to remove those objects from all edge caches immediately.

Question 39: Which AWS service continuously monitors your AWS configurations and evaluates them against desired settings for compliance?

AWS Security Hub
AWS Config (Correct answer)
AWS Inspector
AWS GuardDuty

Correct answer: AWS Config

AWS Config records configuration changes and evaluates resource configurations against rules to ensure compliance.

Question 40: Which IAM policy condition operator would you use to match a tag value against multiple possible values using a single condition?

StringEquals
StringLike
ForAnyValue:StringEquals (Correct answer)
ArnLike

Correct answer: ForAnyValue:StringEquals

ForAnyValue:StringEquals is a set operator that returns true if any value in a multivalued request context key matches any value in the condition.

Question 41: A team wants to reduce the cost of storing Docker images used in their CodePipeline deployments. What is the most cost-effective approach?

Configure ECR Lifecycle Policies to delete untagged and old images automatically (Correct answer)
Use Docker Hub instead of ECR for all images
Store all images in S3 instead of ECR
Compress all Docker images before pushing to ECR

Correct answer: Configure ECR Lifecycle Policies to delete untagged and old images automatically

ECR Lifecycle Policies automatically clean up untagged images and old image versions, reducing the total GB stored and lowering ECR storage costs.

Question 42: A company needs to archive CloudWatch Logs for 7 years to meet compliance requirements. What is the recommended approach?

Export logs to Amazon S3 with a lifecycle policy to move to Glacier (Correct answer)
Use CloudTrail to retain all log history automatically
Increase the CloudWatch Logs retention period to 7 years
Stream logs to DynamoDB for long-term storage

Correct answer: Export logs to Amazon S3 with a lifecycle policy to move to Glacier

Export CloudWatch Logs to S3 and apply a lifecycle policy to transition data to S3 Glacier for cost-effective long-term retention.

Question 43: Which S3 feature, when enabled on a source bucket, can help achieve an RPO near zero for object-level DR in a secondary region?

S3 Transfer Acceleration
S3 Intelligent-Tiering cross-region
S3 Cross-Region Replication with Replication Time Control (RTC) (Correct answer)
S3 Versioning

Correct answer: S3 Cross-Region Replication with Replication Time Control (RTC)

S3 RTC provides a predictable replication SLA (99.99% of objects replicated within 15 minutes) with replication metrics, minimizing RPO for cross-region DR.

Question 44: An ECS service uses a FARGATE_SPOT capacity provider with a base of 0 and weight of 1, and a FARGATE capacity provider with a base of 2 and weight of 1. The service is running 10 tasks. AWS sends a two-minute Spot interruption notice for 4 running Fargate Spot tasks simultaneously. What is the MOST LIKELY outcome?

The service automatically scales the standard Fargate provider to absorb all 4 interrupted tasks within the two-minute window with no service disruption.
ECS immediately replaces all 4 interrupted tasks with standard Fargate tasks before they are terminated, guaranteeing no reduction in running task count.
ECS terminates all 10 tasks and relaunches them entirely on standard Fargate to avoid further interruptions.
ECS attempts to launch 4 replacement tasks using Fargate Spot or standard Fargate per capacity provider weights, but the service may temporarily drop below 10 tasks if capacity is insufficient. (Correct answer)

Correct answer: ECS attempts to launch 4 replacement tasks using Fargate Spot or standard Fargate per capacity provider weights, but the service may temporarily drop below 10 tasks if capacity is insufficient.

Fargate Spot interruptions give a two-minute notice, and ECS will attempt to start replacement tasks — but it does not guarantee they will be running before the interrupted tasks are reclaimed. Replacement tasks are placed according to capacity provider weights and available capacity; if Spot capacity is constrained (a common cause of interruptions), replacement tasks may land on standard Fargate but could take time to reach RUNNING state. ECS does not guarantee zero-drop replacements within two minutes, does not preemptively drain all tasks, and does not unconditionally move the whole service to standard Fargate.

Question 45: A company needs a fully managed message queue that automatically scales to handle millions of messages per second without pre-provisioning. Which AWS service is best suited?

Amazon MQ
Amazon SQS Standard queue (Correct answer)
Amazon SNS FIFO topic
Amazon Kinesis Data Streams

Correct answer: Amazon SQS Standard queue

SQS Standard queues scale automatically to any throughput level without capacity planning, making them ideal for decoupled, massively scalable architectures.

Question 46: What level of DDoS protection does AWS Shield Standard provide?

Only after manual activation
Automatic protection at no extra cost (Correct answer)
No DDoS protection
Paid per-request protection

Correct answer: Automatic protection at no extra cost

AWS Shield Standard is automatically enabled for all AWS customers at no additional charge.

Question 47: The effective throat of a fillet weld is measured from:

The face to the root
The base metal surface to the weld crown
The root to the hypotenuse, measured perpendicularly (Correct answer)
Toe to toe across the weld face

Correct answer: The root to the hypotenuse, measured perpendicularly

The effective throat of a fillet weld is the perpendicular distance from the root to the hypotenuse of the largest inscribed right triangle in the weld cross section.

Question 48: What is the maximum retrieval time for S3 Glacier Deep Archive Standard retrieval?

12 hours (Correct answer)
48 hours
24 hours
4 hours

Correct answer: 12 hours

S3 Glacier Deep Archive Standard retrieval completes within 12 hours, while Bulk retrieval can take up to 48 hours.

Question 49: A company needs to migrate a 50 TB on-premises Oracle database to AWS with minimal downtime. Which combination of services best supports this?

AWS Snowball Edge + AWS Database Migration Service (DMS) (Correct answer)
AWS Transfer Family + Amazon Aurora
AWS DataSync + Amazon RDS
AWS Direct Connect + manual database export/import

Correct answer: AWS Snowball Edge + AWS Database Migration Service (DMS)

Snowball Edge transfers the bulk data offline, and DMS handles ongoing change data capture replication to minimize cutover downtime.

Question 50: An ECS-based deployment pipeline runs tasks that scale up and down frequently. Which compute option minimizes idle costs while maintaining rapid scaling?

Fargate Spot for stateless pipeline tasks (Correct answer)
EC2 launch type with Savings Plans
EC2 launch type with On-Demand instances always running
Dedicated EC2 Reserved Instances for ECS

Correct answer: Fargate Spot for stateless pipeline tasks

Fargate Spot runs ECS tasks on spare AWS capacity at up to 70% discount, and stateless pipeline tasks can handle the possibility of interruption and restart.

Question 51: In an AWS Step Functions state machine used for deployment orchestration, which feature helps handle transient failures in downstream service calls?

State machine versioning with alias routing
Express workflows with synchronous execution
Activity tasks with heartbeat timeouts
Built-in retry and catch configurations on task states with exponential backoff (Correct answer)

Correct answer: Built-in retry and catch configurations on task states with exponential backoff

Step Functions allows defining Retry policies with maxAttempts and backoffRate directly on task states, handling transient errors without custom retry logic.

Question 52: When welding with tandem SAW electrodes, what is the typical relationship between the two arcs?

Both use AC to minimize arc blow
Both use DCEP for maximum penetration
Lead arc uses DCEP for penetration; trail arc uses AC for fill and bead shape (Correct answer)
Lead arc uses AC; trail arc uses DCEN

Correct answer: Lead arc uses DCEP for penetration; trail arc uses AC for fill and bead shape

Tandem SAW typically uses DCEP on the lead wire for deep penetration and AC on the trailing wire to improve deposition and bead shape while reducing arc blow.

Question 53: What is Amazon RDS Multi-AZ deployment?

A backup strategy that copies data to multiple S3 buckets
A high-availability feature that maintains a standby replica in a different Availability Zone (Correct answer)
A feature to run the same database in multiple regions
A read scaling feature using multiple replicas

Correct answer: A high-availability feature that maintains a standby replica in a different Availability Zone

RDS Multi-AZ maintains a synchronous standby replica in a different AZ and automatically fails over to it during outages, ensuring high availability.

Question 54: Which AWS storage service provides scalable object storage for any amount of data?

AWS Storage Gateway
Amazon EFS
Amazon EBS
Amazon S3 (Correct answer)

Correct answer: Amazon S3

Amazon S3 (Simple Storage Service) provides virtually unlimited scalable object storage accessible from anywhere over the internet.

Question 55: Which control helps prevent accidental public exposure of S3 buckets account-wide?

S3 Transfer Acceleration
Bucket versioning
Requester Pays
S3 Block Public Access (Correct answer)

Correct answer: S3 Block Public Access

S3 Block Public Access settings override permissive policies to prevent unintended public access.

Question 56: How does the AWS DevOps body of knowledge relate to daily professional practice?

It is theoretical and has limited practical application
It only applies during certification exams
It is relevant only for academic research
It provides the foundational framework that guides decision-making and standard practices (Correct answer)

Correct answer: It provides the foundational framework that guides decision-making and standard practices

The body of knowledge provides the foundational framework of principles, standards, and best practices that professionals use to guide their daily decision-making, ensure consistent quality, and maintain alignment with industry standards.

Question 57: Which AWS feature allows DynamoDB to automatically replicate data across multiple AWS Regions for high availability and disaster recovery?

DynamoDB DAX with multi-region cache clusters
DynamoDB Global Tables (Correct answer)
DynamoDB on-demand backup with cross-region restore
DynamoDB Streams with Lambda replication functions

Correct answer: DynamoDB Global Tables

DynamoDB Global Tables provide fully managed, multi-region, multi-active replication with automatic conflict resolution.

Question 58: A developer needs to ensure messages in an SQS queue are processed exactly once. Which SQS feature should they use?

FIFO Queue with content-based deduplication (Correct answer)
Dead-letter queue with redrive policy
Standard Queue with visibility timeout
Long polling with message retention

Correct answer: FIFO Queue with content-based deduplication

FIFO queues with content-based deduplication use a SHA-256 hash of the message body to prevent duplicate processing.

Question 59: What is a potential hazard of welding in confined spaces?

Overhead hazards
Fume buildup (Correct answer)
UV radiation
Slippery floor

Correct answer: Fume buildup

Welding in confined spaces poses a significant hazard due to the rapid buildup of welding fumes and gases. These fumes can displace oxygen, leading to asphyxiation, or contain toxic substances that can cause severe respiratory issues. Proper ventilation, air monitoring, and respiratory protection are critical in such environments.

Question 60: Which Amazon S3 storage class is most cost-effective for data that is accessed less than once a month?

S3 Standard-IA
S3 Glacier Instant Retrieval (Correct answer)
S3 Intelligent-Tiering
S3 Standard

Correct answer: S3 Glacier Instant Retrieval

S3 Glacier Instant Retrieval is designed for archive data that needs millisecond retrieval but is accessed infrequently, offering very low storage costs.

Question 61: Which cloud design principle helps ensure fault tolerance and high availability?

Vertical scaling
Using a single data center
Minimizing resource allocation
Designing for failure with redundancy (Correct answer)

Correct answer: Designing for failure with redundancy

Designing for failure with redundancy is a core cloud design principle that ensures fault tolerance and high availability. This involves deploying multiple instances of resources across different availability zones or regions, so if one component or location fails, others can seamlessly take over. Redundancy prevents single points of failure, ensuring applications remain operational even during outages.

Question 62: When pre-qualifying a FCAW procedure under AWS D1.1, increasing the base metal thickness beyond the tested range typically requires:

Welder requalification only
Only increasing the preheat temperature
Simply updating the WPS without re-testing
A new WPS supported by a new PQR at the increased thickness (Correct answer)

Correct answer: A new WPS supported by a new PQR at the increased thickness

AWS D1.1 requires a new Procedure Qualification Record (PQR) with testing at the new thickness to support a revised WPS when essential variables change.

Question 63: An application running on EC2 instances behind an Application Load Balancer experiences unpredictable traffic spikes. The company wants to ensure that the application can handle the increased load automatically without manual intervention and also scale down to reduce costs during quiet periods. Which AWS service should be used in conjunction with the Application Load Balancer?

Amazon EC2 Auto Scaling (Correct answer)
Amazon CloudWatch Alarms
AWS Lambda
Elastic IP Addresses

Correct answer: Amazon EC2 Auto Scaling

Amazon EC2 Auto Scaling is designed to automatically adjust the number of EC2 instances in a group to meet the current demand. It works with Elastic Load Balancing to add or remove instances from the load balancer's target group based on metrics like CPU utilization, ensuring both scalability and cost-efficiency.

Question 64: What does the flux coating on a stick electrode do?

Acts as a filler metal
Creates shielding gas and slag (Correct answer)
Increases the electrode temperature
Conducts electricity more efficiently

Correct answer: Creates shielding gas and slag

The flux coating on a stick electrode serves multiple crucial functions. As it burns, it produces a shielding gas that protects the molten weld pool from atmospheric oxygen and nitrogen. It also forms a protective slag layer over the cooling weld, which further shields it and helps shape the bead, before being chipped away after solidification.

Question 65: What is the purpose of the AWS Free Tier's '12 months free' category?

Services free for 12 months only if you purchase a Support plan
Services that are permanently free for all AWS customers regardless of account age
Services free for the first 12 months following your initial AWS account sign-up date (Correct answer)
Services free for 12 months only in the us-east-1 region

Correct answer: Services free for the first 12 months following your initial AWS account sign-up date

'12 months free' services (e.g., 750 hours/month of t2.micro EC2, 5 GB of S3 Standard storage) are available at no charge for the first 12 months after you create your AWS account. After that period, standard pay-as-you-go rates apply.

AWS Certified Solutions Architect - Associate (SAA-C03)

This exam validates the ability to design and implement distributed systems on AWS, focusing on cost-effective, fault-tolerant, and scalable solutions.

Questions

130 min

Time Limit

72%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds