Official Bank
0/879
Page
1/4
AWS-Solution-Architect-Associate Exam (SAA-C03) - AWS Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
879
Total Questions
1
Question
A company has a transaction-processing application that is backed by an Amazon RDS MySQL database. When the load on the application increases, a large number of database connections are opened and closed frequently, which causes latency for the database transactions. A solutions architect determines that the root cause of the latency is poor connection handling by the application. The solutions architect cannot modify the application code. The solutions architect needs to manage database connections to improve the database performance during periods of high load.
Which solution will meet these requirements?
Which solution will meet these requirements?
Options
A
Upgrade the database instance to a larger instance type to handle a large number of database connections.
B
Configure Amazon RDS storage autoscaling to dynamically increase the provisioned IOPS.
C
Convert the database instance to a Multi-AZ deployment.
D
Use Amazon RDS Proxy to pool and share database connections.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A company has an application that serves clients that are deployed in more than 20.000 retail storefront locations around the world. The application consists of backend web services that are exposed over HTTPS on port 443 The application is hosted on Amazon EC2 Instances behind an Application Load Balancer (ALB). The retail locations communicate with the web application over the
public internet. The company allows each retail location to register the IP address that the retail
location has been allocated by its local ISP. The company's security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.
What should a solutions architect do to meet these requirements?
public internet. The company allows each retail location to register the IP address that the retail
location has been allocated by its local ISP. The company's security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.
What should a solutions architect do to meet these requirements?
Options
A
Associate an AWS WAF web ACL with the ALB Use IP rule sets on the ALB to filter traffic Update the IP addresses in the rule to Include the registered IP addresses
B
Store the IP addresses in an Amazon DynamoDB table. Configure an AWS Lambda authorization function on the ALB to validate that incoming requests are from the registered IP addresses.
C
Deploy AWS Firewall Manager to manage the ALB. Configure firewall rules to restrict traffic to the ALB Modify the firewall rules to include the registered IP addresses.
D
Configure the network ACL on the subnet that contains the public interface of the ALB Update the ingress rules on the network ACL with entries for each of the registered IP addresses.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
A company manages millions of documents in hundreds of Amazon S3 buckets in multiple AWS Regions. The company must determine whether any of the S3 buckets contain personally identifiable information (PII).
Which solution will meet this requirement with the LEAST operational overhead?
Which solution will meet this requirement with the LEAST operational overhead?
Options
A
Use AWS Lambda functions to review each file in the S3 buckets to identify PII.
B
Use Amazon Detective to detect PII in the S3 buckets.
C
Use Amazon Macie to detect PII in the S3 buckets.
D
Use AWS Trusted Advisor to generate PII notifications.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
A company hosts an application that processes highly sensitive customer transactions on AWS. The application uses Amazon RDS as its database. The company manages its own encryption keys to secure the data in Amazon RDS. The company needs to update the customer-managed encryption keys at least once each year.
Which solution will meet these requirements with the LEAST operational overhead?
Which solution will meet these requirements with the LEAST operational overhead?
Options
A
Set up automatic key rotation in AWS Key Management Service (AWS KMS) for the encryption keys.
B
Configure AWS Key Management Service (AWS KMS) to alert the company to rotate the encryption keys annually.
C
Create an AWS CloudFormation stack to run an AWS Lambda function that deploys new encryption keys once each year.
D
Schedule an AWS Lambda function to rotate the encryption keys annually.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
An ecommerce company runs several internal applications in multiple AWS accounts. The company uses AWS Organizations to manage its AWS accounts. A security appliance in the company's networking account must inspect interactions between applications across AWS accounts.
Which solution will meet these requirements?
Which solution will meet these requirements?
Options
A
Deploy a Network Load Balancer (NLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the NLB by using an interface VPC endpoint in the application accounts
B
Deploy a Gateway Load Balancer (GWLB) in the networking account to send traffic to the security appliance. Configure the application accounts to send traffic to the GWLB by using an interface GWLB endpoint in the application accounts
C
Deploy an Application Load Balancer (ALB) in the application accounts to send traffic directly to the security appliance.
D
Deploy an interface VPC endpoint in the application accounts to send traffic directly to the security appliance.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.