Official Bank
0/875
Page
1/4
AWS SAA-C03 Cheat Sheet: The Ultimate Study Guide for AWS Certified Solutions Architect Associate Exam (AWS-SAA) - Study Guides Exam Questions
Last updated on July 22, 2026
97%
Exam Compliance
875
Total Questions
1
Question
A company wants to enhance its ecommerce order-processing application that is deployed on AWS. The application must process each order exactly once without affecting the customer experience during unpredictable traffic surges.
Which solution will meet these requirements?
Which solution will meet these requirements?
Options
A
Create an Amazon Simple Notification Service (Amazon SNS) standard topic. Publish all the orders to the SNS standard topic. Configure the application as a notification target.
B
Create an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Put all the orders in the SQS queue. Configure an AWS Lambda function as the target to process the orders.
C
Configure AWS X-Ray in the application to track the order requests. Configure the application to process the orders by pulling the orders from Amazon CloudWatch.
D
Create a flow by using Amazon AppFlow. Send the orders to the flow. Configure an AWS Lambda function as the target to process the orders.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A company is building a data processing application that uses AWS Lambda functions. The Lambda functions need to communicate with an Amazon RDS DB instance deployed inside a VPC in the same AWS account.
Which solution meets these requirements in the most secure way?
Which solution meets these requirements in the most secure way?
Options
A
Deploy Lambda inside the VPC. Attach a network ACL allowing outbound access to the VPC CIDR.
Update the DB security group to allow traffic from 0.0.0.0/0.
Update the DB security group to allow traffic from 0.0.0.0/0.
B
Configure the DB instance for public access. Allow Lambda public address space.
C
Peer the Lambda default VPC with the DB VPC and avoid security groups.
D
Deploy Lambda inside the VPC. Attach a security group to the Lambda functions. Allow outbound access only to the VPC CIDR. Update the DB instance security group to allow traffic from the Lambda security group.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
A company runs a high-traffic web application that has a three-tier architecture consisting of a web layer, an application layer, and a database layer. The web layer and application layer run on Amazon EC2 instances behind an Application Load Balancer (ALB). The application layer is stateless and supports automatic scaling. The database layer uses Amazon RDS for MySQL in a Multi-AZ configuration and relies on a relational architecture. The company is preparing for a large marketing event that is expected to drive a sharp increase in read traffic. The company must ensure that the application remains highly available and responsive under load. The company wants to scale the application's architecture components but does not want to modify the application.
Which combination of solutions will meet these requirements? (Select THREE.)
Which combination of solutions will meet these requirements? (Select THREE.)
Select 3
Options
A
Enable automatic scaling for EC2 instances in the application layer.
B
Set up an Amazon ElastiCache (Redis OSS) cluster in front of the database.
C
Migrate the database to an Amazon DynamoDB table.
D
Deploy an Amazon CloudFront distribution. Specify the web layer as the origin.
E
Replace the ALB with a Network Load Balancer (NLB).
F
Migrate the database to Amazon Aurora. Configure Aurora Auto Scaling and Aurora Replicas.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
A company runs a latency-sensitive gaming service in the AWS Cloud. The gaming service runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). An Amazon DynamoDB table stores the gaming data. All the infrastructure is in a single AWS Region. The main user base is in that same Region. A solutions architect needs to update the architecture to support a global expansion of the gaming
service. The gaming service must operate with the least possible latency.
Which solution will meet these requirements?
service. The gaming service must operate with the least possible latency.
Which solution will meet these requirements?
Options
A
Deploy an Amazon API Gateway regional API endpoint. Integrate the API endpoint with the ALB.
B
Create an Amazon CloudFront distribution in front of the ALB.
C
Deploy the ALB and the fleet of EC2 instances to another Region. Use Amazon Route 53 with geolocation routing.
D
Create an accelerator in AWS Global Accelerator. Add a listener. Configure the endpoint to point to the ALB.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
A company has applications that run in an organization in AWS Organizations. The company outsources operational support of the applications. The company needs to provide access for the external support engineers without compromising security. The external support engineers need access to the AWS Management Console. The external support engineers also need operating system access to the company's fleet of Amazon EC2 instances that run Amazon Linux in private subnets.
Which solution will meet these requirements MOST securely?
Which solution will meet these requirements MOST securely?
Options
A
Confirm that AWS Systems Manager Agent {SSM Agent) is installed on all instances. Assign an
instance profile with the necessary policy to connect to Systems Manager. Use Systems Manager Session Manager to provide local IAM user credentials in each AWS account to the external support engineers for console access.
instance profile with the necessary policy to connect to Systems Manager. Use Systems Manager Session Manager to provide local IAM user credentials in each AWS account to the external support engineers for console access.
B
Confirm that AWS Systems Manager Agent (SSM Agent) is installed on all instances. Assign an instance profile with the necessary policy to connect to Systems Manager. Use AWS IAM IdentityCenter to provide the external support engineers console access. Use Systems Manager Session Manager to assign the required permissions.
C
Create a bastion host in a public subnet. Set up the bastion host security group to allow access
from only the external engineers' IP address ranges Ensure that all instances have a security group
that allows SSH access from the bastion host. Provide each external support engineer an SSH key pair to log in to the application instances. Provide local account IAM user credentials to the engineers for console access.
from only the external engineers' IP address ranges Ensure that all instances have a security group
that allows SSH access from the bastion host. Provide each external support engineer an SSH key pair to log in to the application instances. Provide local account IAM user credentials to the engineers for console access.
D
Confirm that all instances have a security group that allows SSH access only from the external support engineers source IP address ranges. Provide local IAM user credentials in each AWS account to the external support engineers for console access. Provide each external support engineer an SSH key pair to log in to the application instances.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.