AWS : AWS Solutions Architect Associate

A payments API must stay available if a single Availability Zone fails. Which design meets that requirement at the lowest operational complexity?

• A. Run all instances in one AZ and take hourly AMI snapshots
• B. Deploy the API across at least two Availability Zones in the same Region
• C. Replicate the stack to a second Region and fail over manually each week
• D. Pin the database to a single host and increase instance size

An analytics team reads the same objects thousands of times per day. Which storage class is the most cost-effective default for those objects?

• A. S3 Glacier Deep Archive
• B. S3 Standard
• C. S3 One Zone-Infrequent Access for all objects
• D. Instance store on a single analytics node

A workload must encrypt data at rest and restrict which principals can decrypt it. Which TWO controls should you combine?

• A. Use a customer-managed KMS key with a least-privilege key policy
• B. Enable encryption on the data store (for example S3 or EBS)
• C. Disable CloudTrail to hide decrypt events
• D. Share the same IAM user access keys across all teams

Users in an office need private access to an S3 bucket without traversing the public internet. What should you introduce?

• A. An internet gateway and a public IP on each client
• B. A VPC gateway endpoint for S3
• C. A NAT instance in a public subnet with port 80 open to the world
• D. Disable bucket policies entirely

A queue-backed worker fleet should scale with backlog without over-provisioning at night. What is the most direct signal to scale on?

• A. CPU utilization of a single bastion host
• B. Approximate number of messages visible in the queue
• C. Number of IAM users in the account
• D. The age of the newest AMI

A relational database needs automatic failover across Availability Zones with minimal application change. Which service model fits?

• A. Self-managed MySQL on one EC2 instance
• B. A Multi-AZ managed relational database
• C. Storing JSON files in S3 and querying with grep
• D. An Elastic IP moved by a cron job

Which TWO practices reduce blast radius when a deploy fails?

• A. Separate production from non-production environments
• B. Grant every engineer AdministratorAccess in production
• C. Use least-privilege IAM roles for deploy tooling
• D. Store secrets in world-readable object storage

Static assets are read globally and change a few times per week. What should sit in front of the origin to cut latency?

• A. A single NAT gateway in one AZ
• B. A content delivery network in front of the origin
• C. Disabling HTTPS to save handshake time
• D. An SMTP relay

Demo item 9 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 10 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 11 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 12 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 13 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 14 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 15 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 16 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 17 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 18 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 19 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 20 for SAA-C03: a change must be reversible within one hour. What should you require?

• A. Skip rollback because AWS Solutions Architect Associate never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket