AWS Solutions Architect Associate Practice Questions (Free Sample)

Free practice sample

Fifteen original AWS Certified Solutions Architect – Associate practice questions, unlocked with no signup and instant scoring. The sample draws proportionally across all four domains of the SAA-C03 exam guide, so the mix you see here reflects the shape of the real exam rather than a single topic slice.

SAA-C03 does not ask what a service is. It hands you a short scenario with a stated business or technical requirement and four services that would all technically work, then asks which design satisfies the requirement, most securely, most cheaply, or with the least operational overhead. Three of the four options are near-misses a working architect would seriously consider, and one detail in the scenario is what eliminates them. These questions are written to that standard, and every explanation names the winning answer and the tempting alternative it beats.

Vendor · AWS Exam code · SAA-C03 65 items (50 scored + 15 unscored) Duration · 130 min Pass 720 / 1000 $150 USD MCQ + multi-response 4 domains ~1 yr AWS experience 3-year renewal
Design Secure Architectures Domain 1 · 30%
Design Resilient Architectures Domain 2 · 26%
Design High-Performing Architectures Domain 3 · 24%
Design Cost-Optimized Architectures Domain 4 · 20%

AWS Solutions Architect Associate (SAA-C03) - Free Sample Questions

  1. Question 1 of 15Design Secure Architectures

    An application running on EC2 instances in private subnets must read and write objects in one S3 bucket. The security team requires that the traffic never traverse the public internet and that the bucket accept requests only from that VPC. Which design meets both requirements with the least operational overhead?

  2. Question 2 of 15Design Secure Architectures

    A developer hard-coded an IAM user's access key and secret key into an application deployed on an EC2 instance so it can query a DynamoDB table. A security review flags this. What should the solutions architect recommend?

  3. Question 3 of 15Design Secure Architectures

    A company stores regulated documents in S3. Auditors require that the encryption keys be created and controlled by the company, rotated on a schedule the company sets, and that every use of a key be logged. Which configuration satisfies the auditors?

  4. Question 4 of 15Design Secure Architectures

    A public web application behind an Application Load Balancer is receiving SQL injection and cross-site scripting attempts. The company wants to block these request patterns before they reach the application, without changing application code. What should the architect add?

  5. Question 5 of 15Design Secure Architectures

    A partner company needs to upload files to a specific prefix in one of your S3 buckets from its own AWS account. Your policy forbids sharing IAM user credentials outside the organization. Which approach grants the access securely?

  6. Question 6 of 15Design Resilient Architectures

    A MySQL database on Amazon RDS backs a customer-facing application. The business requires that a failure of the database's Availability Zone cause no more than a few minutes of downtime, with no manual intervention and no change to the application's connection string. Which option delivers this?

  7. Question 7 of 15Design Resilient Architectures

    An e-commerce site takes orders through a web tier and hands them to a fleet of worker instances for fulfilment. During flash sales the workers fall behind and orders are lost when the web tier times out. How should the architect decouple the two tiers so no order is lost?

  8. Question 8 of 15Design Resilient Architectures

    A company wants to host a static marketing website that must stay available even if an entire Availability Zone fails, serve visitors worldwide with low latency, and need no servers to patch. Which architecture meets these requirements?

  9. Question 9 of 15Design Resilient Architectures

    A content management application runs on EC2 instances across three Availability Zones behind a load balancer. Editors upload images that every instance must be able to read and write immediately, using standard file system calls. Which storage service fits?

  10. Question 10 of 15Design High-Performing Architectures

    A product catalog application reads the same few thousand items from an Amazon RDS database millions of times a day; the data changes only a few times per week. The database CPU is saturated by read traffic. What is the MOST effective way to improve performance?

  11. Question 11 of 15Design High-Performing Architectures

    Field teams on several continents upload multi-gigabyte survey files to a single S3 bucket in us-east-1 and report that uploads from far-away locations are slow. Which change most directly improves upload speed for the distant teams?

  12. Question 12 of 15Design High-Performing Architectures

    A mobile game needs a database for player session state: simple key-value reads and writes, single-digit-millisecond latency, and the ability to scale from hundreds to millions of requests per second with no capacity planning by the team. Which service should the architect choose?

  13. Question 13 of 15Design High-Performing Architectures

    A company lands about 100 GB of application logs in S3 every day. Analysts occasionally need to run ad hoc SQL queries across several days of logs. The company does not want to provision or manage any servers or clusters for this. Which service should the architect recommend?

  14. Question 14 of 15Design Cost-Optimized Architectures

    A company runs a line-of-business application on a fixed fleet of EC2 instances 24 hours a day, and expects to keep running it in the same configuration for at least three years. Which purchasing option reduces the compute cost the MOST without risking interruption?

  15. Question 15 of 15Design Cost-Optimized Architectures

    A hospital must retain imaging archives for seven years to satisfy regulations. The files are almost never read, and when an auditor does request one, a retrieval time of up to 12 hours is acceptable. Which storage class minimizes cost while meeting the requirement?

Untimed, no account needed. Your score appears instantly. Add your email afterwards if you want the explanation for every question and a copy of your results.

Frequently asked questions about the AWS Solutions Architect – Associate exam

How many questions are on the actual SAA-C03 exam?

65 items in a 130-minute window, of which 50 are scored and 15 are unscored pretest items that do not affect your result. You cannot tell which is which, so every question gets the same effort, and since nothing is deducted for a wrong answer, an unanswered item is strictly worse than a considered guess. The format mixes multiple-choice with multiple-response items. Confirm current logistics on aws.amazon.com when you book, since AWS sets the format and may change it.

What score do I need to pass SAA-C03?

AWS scores the live exam on a 100-1000 scale with 720 required to pass. That conversion does not map linearly to a raw percentage, so 720 is not “72% of the questions right”. It is a scaled figure derived from item difficulty. Certifym sets the pass mark on its full-length SAA-C03 sets at 72% as the honest raw-score equivalent. Treat that as a floor: candidates who clear it consistently, across all four domains rather than only the heavy ones, walk in with real margin.

Which domains should I spend the most time on?

Design Secure Architectures is the largest domain at 30% and the single biggest reason candidates fail: IAM, KMS, VPC network security, and the detection services. Design Resilient Architectures follows at 26%, so the two together account for more than half your scored questions. Design High-Performing Architectures is 24%. Design Cost-Optimized Architectures is the lightest at 20%, but it is the domain where practitioner intuition matters most, and it is small enough that a weak run there is recoverable only if everything else is strong.

Do I need a year of AWS experience before I sit the exam?

The exam guide describes the target candidate as having at least a year of hands-on experience designing cloud solutions using AWS compute, storage, database, and networking services. That is a description of who the questions are written for, not paperwork you file. What it means in practice is that you are not expected to be a specialist in any single service. You are expected to know which service is the right tool for a scenario, and why the near-miss alternatives are not. Candidates who have only read about the services, rather than built with them, generally find the scenario framing harder than the service list suggests.

How does this compare with the AWS Cloud Practitioner exam?

Solutions Architect – Associate sits one step above the foundational AWS Certified Cloud Practitioner. Cloud Practitioner establishes what the services are and how AWS bills for them; the Associate exam assumes that and tests design judgment across multi-service scenarios. It is the most widely held AWS certification worldwide and a common gate for cloud engineer, cloud architect, and DevOps roles, which is why it is the usual first serious AWS credential rather than the second.

What do the questions actually look like?

Multiple-choice items with one best answer, plus multiple-response items where you select two or more. Most are scenario-driven and span several services. A requirement is stated in one clause of the stem, and that clause is what eliminates three otherwise-workable options. The recurring trade-off across every domain is latency, throughput, operational overhead, and cost, so reading for what the scenario is actually optimising is more productive than pattern-matching a keyword to a service name.

How is this free sample different from the full Certifym bank?

The sample is a fixed 15-question set spread across the four domains at blueprint proportions, with no account needed. Each full Certifym set is 65 fresh scenario questions distributed exactly to the SAA-C03 blueprint (20 on secure architecture, 17 on resilience, 15 on high performance, and 13 on cost optimisation) on a 130-minute timer at a 72% pass mark. Sets are authored around rotating enterprise verticals, from healthcare and financial services to manufacturing, government, retail, SaaS, higher education, and energy, so working through several exposes you to a genuinely wide spread of scenarios rather than the same handful reworded. None of the paid-bank items appear in this sample.

Is Certifym affiliated with AWS?

No. Certifym.net is operated by Certifym Exam Services, LLC and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. All questions and explanations on this site are original content produced by Certifym and are not sourced from actual AWS exam questions.

Trademark notice & independence. Certifym.net is operated by Certifym Exam Services, LLC and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. AWS®, Amazon Web Services®, and AWS Certified Solutions Architect™ are trademarks of Amazon.com, Inc. or its affiliates, used here only to identify the certification these study materials are intended for. The SAA-C03 exam guide and its domain structure are the property of Amazon Web Services, Inc.; download the current exam guide directly from aws.amazon.com.

All practice questions, answers, and explanations on this page are original content produced by Certifym Exam Services, LLC. They are not actual AWS examination questions and are not represented as such. Exam format, domain weights, fees, and eligibility criteria are set by Amazon Web Services and may change; verify current details at aws.amazon.com before scheduling.