DummyExams LogoDummyExams
AWS logo

Free Practice · No Signup Required

30 Free AWS SAA-C03-NEW Practice Questions

Real practice questions for the AWS Solutions Architect (New Pool) (SAA-C03-NEW) exam, with answers and detailed explanations. Updated 2026.

Free questions

30

Passing score

720 out of 1000

Exam time

130 minutes

Question pool

497+ Questions

Below are 30 real practice questions for the AWS Solutions Architect (New Pool) (SAA-C03-NEW) exam. Each question shows the correct answer and a detailed explanation when you reveal it. Use these to benchmark your readiness — if you score below 70% on these 30 questions, plan for at least 4 more weeks of study before booking.

SAA-C03-NEW Practice Questions

  1. FreePracticeQuiz.questionLabelData Processing

    A bicycle sharing company is developing a multi-tier architecture to track the location of its bicycles during peak operating hours. The data points must be accessible from a REST API. Which action meets these requirements for storing and retrieving location data?

    A
    Use Amazon Athena with Amazon S3.
    B
    Use Amazon API Gateway with AWS Lambda.
    C
    Use Amazon QuickSight with Amazon Redshift.
    D
    Use Amazon API Gateway with Amazon Kinesis Data Analytics.
  2. FreePracticeQuiz.questionLabelStorage Optimization

    A solutions architect needs to implement a solution to reduce a company's storage costs. All data is in S3 Standard. The company must keep data for at least 25 years. Data from the most recent 2 years must be highly available and immediately retrievable.

    A
    Set up an S3 life cycle policy to transition objects to S3 Glacier Deep Archive immediately.
    B
    Set up an S3 life cycle policy to transition objects to S3 Glacier Deep Archive after 2 years.
    C
    Use S3 Intelligent-Tiering and activate the archiving option.
    D
    Set up an S3 life cycle policy to transition objects to S3 One Zone-IA immediately and to S3 Glacier Deep Archive after 2 years.
  3. FreePracticeQuiz.questionLabelScalability

    A food delivery service is experiencing scaling problems. The current architecture uses EC2 instances in Auto Scaling groups for order collection and fulfillment. Collection is fast, but fulfillment takes longer. Data must not be lost. How can both processes scale adequately?

    A
    Use CloudWatch to monitor CPU and set minimum capacity to peak workload values.
    B
    Use CloudWatch to invoke SNS to create additional Auto Scaling groups on demand.
    C
    Provision two SQS queues and scale based on notifications sent by the queues.
    D
    Provision two SQS queues and scale the Auto Scaling groups based on the number of messages in each queue.
  4. FreePracticeQuiz.questionLabelAnalytics

    A company needs to consolidate batch and streaming data into S3 for business analytics (KPIs, one-time queries) with the least operational overhead.

    A
    Use Amazon Athena for one-time queries and Amazon QuickSight for dashboards.
    B
    Use Amazon Kinesis Data Analytics for one-time queries and QuickSight for dashboards.
    C
    Create custom Lambda functions to move records to Redshift.
    D
    Use an AWS Glue ETL job to load data into multiple OpenSearch Service clusters.
    E
    Use blueprints in AWS Lake Formation to ingest data and AWS Glue to load data into S3 in Apache Parquet format.
  5. FreePracticeQuiz.questionLabelSecurity

    Rotate credentials for Amazon RDS for MySQL databases across multiple regions with the least operational overhead.

    A
    Store credentials in AWS Secrets Manager, use multi-region secret replication, and configure scheduled rotation.
    B
    Store credentials in Systems Manager Parameter Store (Secure String) with multi-region replication.
    C
    Store credentials in an S3 bucket with SSE and use EventBridge with Lambda for rotation.
    D
    Encrypt with KMS multi-region keys, store in DynamoDB, and use Lambda with RDS API for rotation.
  6. FreePracticeQuiz.questionLabelSecurity and Networking

    Securely integrate Amazon S3 with an application in a private subnet using Amazon Cognito to store user documents.

    A
    Create an Amazon Cognito identity pool to generate temporary S3 access tokens.
    B
    Use the existing user pool to generate S3 access tokens.
    C
    Create an Amazon S3 VPC endpoint in the VPC.
    D
    Create a NAT gateway and an S3 policy denying requests not initiated from Cognito.
    E
    Attach an S3 policy allowing access only from user IP addresses.
  7. FreePracticeQuiz.questionLabelIntegration and Messaging

    When an automobile is sold on a website, the data must be sent to multiple target systems reliably.

    A
    Lambda triggered by RDS update to send information to an SQS queue.
    B
    Lambda triggered by RDS update to send information to an SQS FIFO queue.
    C
    Subscribe to RDS event notifications and send to an SQS queue fanned out to SNS topics.
    D
    Subscribe to RDS event notifications and send to an SNS topic fanned out to multiple SQS queues.
  8. FreePracticeQuiz.questionLabelServerless Architecture

    Migrate a small Python application processing JSON documents to the cloud with maximum scalability and minimum maintenance.

    A
    JSON in S3, Python on EC2 instances, results in Aurora.
    B
    JSON in S3, Lambda function triggered by S3 to process documents, results in Aurora.
    C
    JSON in EBS (multi-attach) to EC2 instances, results in RDS.
    D
    JSON in SQS, code as a container on ECS (EC2 launch type), results in RDS.
  9. FreePracticeQuiz.questionLabelAWS Glue

    Prevent AWS Glue from reprocessing old XML data already processed in an S3 bucket.

    A
    Edit the job to use job bookmarks.
    B
    Edit the job to delete data after processing.
    C
    Set the number of workers to one.
    D
    Use a "Find Matches" ML transform.
  10. FreePracticeQuiz.questionLabelServerless and Storage

    Scale an image analysis application (EC2 and DynamoDB) to handle varying numbers of concurrent users.

    A
    Use Lambda to process photos and store both photos and metadata in DynamoDB.
    B
    Use Kinesis Data Firehose to process and store photos and metadata.
    C
    Use Lambda to process photos, store photos in S3, and keep metadata in DynamoDB.
    D
    Increase EC2 instances to three and use EBS IO2 volumes.
  11. FreePracticeQuiz.questionLabelSecurity

    A static website on S3 via CloudFront must have all traffic inspected by AWS WAF.

    A
    S3 bucket policy accepting only the AWS WAF ARN.
    B
    Configure CloudFront to forward requests to WAF before S3.
    C
    Security group allowing CloudFront IPs to S3 and associate WAF with CloudFront.
    D
    Use an Origin Access Identity (OAI) for S3 and enable WAF on the CloudFront distribution.
  12. FreePracticeQuiz.questionLabelContent Delivery

    Improve global performance for uploading and downloading images on an S3-hosted site with minimal effort.

    A
    Configure CloudFront for downloads and enable S3 Transfer Acceleration for uploads.
    B
    Use multi-region EC2 instances with Global Accelerator.
    C
    CloudFront for downloads and configure the app to upload via CloudFront with multi-region S3.
    D
    Configure AWS Global Accelerator for the S3 bucket.
  13. FreePracticeQuiz.questionLabelSecurity Management

    Protect REST APIs (API Gateway) in multiple regions and accounts from SQL injection and XSS with minimal administrative effort.

    A
    Set up AWS WAF in both regions and associate regional ACLs with stages.
    B
    Set up AWS Firewall Manager in both regions to centrally configure WAF rules.
    C
    Set up AWS Shield in both regions.
    D
    Set up AWS Shield in one region.
  14. FreePracticeQuiz.questionLabelContent Delivery

    Improve performance of both real-time and on-demand video streaming for a global audience.

    A
    Amazon CloudFront.
    B
    AWS Global Accelerator.
    C
    Amazon Route 53.
    D
    Amazon S3 Transfer Acceleration.
  15. FreePracticeQuiz.questionLabelCost Optimization

    Most cost-effective purchasing options for: EC2 (sporadic, interruptible), Fargate (predictable), and Lambda (predictable).

    A
    Use spot instances for the data ingestion layer (EC2).
    B
    Use on-demand instances for the ingestion layer.
    C
    Purchase a one-year Compute Savings Plan for Fargate and Lambda.
    D
    Purchase one-year reserved instances for the ingestion layer.
    E
    Purchase a one-year EC2 Instance Savings Plan for Fargate and Lambda.
  16. FreePracticeQuiz.questionLabelMessaging

    Ensure all notifications in an SNS -> Lambda workflow are eventually processed despite network failures.

    A
    Deploy Lambda across multiple availability zones.
    B
    Increase Lambda CPU and memory.
    C
    Increase SNS retry attempts and wait time.
    D
    Configure an SQS queue as an on-failure destination for Lambda.
  17. FreePracticeQuiz.questionLabelMigration

    Steps for a "lift and shift" migration of on-premises VMs to AWS.

    A
    Use AWS SCT.
    B
    Use AWS Application Migration Service (MGN) and install the replication agent.
    C
    Complete initial replication and launch test instances.
    D
    Stop operations on VMs and launch a cutover instance.
    E
    Use AWS App2Container (A2C).
    F
    Use AWS DMS.
  18. FreePracticeQuiz.questionLabelGovernance

    Scalable and centralized way to limit access to specific services/actions for all accounts in an organization.

    A
    Create an ACL.
    B
    Create a security group.
    C
    Create cross-account roles in each account.
    D
    Create a Service Control Policy (SCP) in the root organizational unit.
  19. FreePracticeQuiz.questionLabelStorage Optimization

    Retain 10 TB of logs monthly for 10 years. Logs are frequent for 1 month, then rare. Most cost-effective storage.

    A
    S3, then use AWS Backup to move logs to Glacier Deep Archive after 1 month.
    B
    S3, then use S3 life cycle policies to move logs to Glacier Deep Archive after 1 month.
    C
    CloudWatch Logs, then use AWS Backup.
    D
    CloudWatch Logs, then use S3 life cycle policies.
  20. FreePracticeQuiz.questionLabelNetworking

    Ensure network traffic for file transfers between EC2 and S3 takes a private route.

    A
    Create a NAT gateway.
    B
    Restrict the EC2 security group to the S3 prefix list.
    C
    Move EC2 to private subnets and create a VPC endpoint for S3.
    D
    Remove the internet gateway and use Direct Connect.
  21. FreePracticeQuiz.questionLabelSecurity

    Reduce the risk of DDoS attacks against a public web application using an ALB.

    A
    Add an Amazon Inspector agent to the ALB.
    B
    Configure Amazon Macie.
    C
    Enable AWS Shield Advanced.
    D
    Configure Amazon GuardDuty.
  22. FreePracticeQuiz.questionLabelHigh Availability

    Redesign an architecture (RabbitMQ, App, PostgreSQL) running on single-AZ EC2 for highest availability with least overhead.

    A
    RabbitMQ on Amazon MQ (active/standby), Multi-AZ ASG for the app, and Multi-AZ ASG for PostgreSQL on EC2.
    B
    RabbitMQ on Amazon MQ (active/standby), Multi-AZ ASG for the app, and Multi-AZ RDS for PostgreSQL.
    C
    Multi-AZ ASG for RabbitMQ on EC2, Multi-AZ ASG for the app, and Multi-AZ RDS.
    D
    Multi-AZ ASGs for all three components on EC2.
  23. FreePracticeQuiz.questionLabelData Transfer

    Aggregate 500 GB of daily data from global sites into one S3 bucket as quickly as possible with low complexity.

    A
    Turn on S3 Transfer Acceleration and use multi-part uploads.
    B
    Upload to the closest regional S3 bucket and use Cross-Region Replication.
    C
    Use daily AWS Snowball Edge jobs.
    D
    Upload to a regional EC2 instance, use EBS snapshots, and copy them.
  24. FreePracticeQuiz.questionLabelContainers and Databases

    Improve a containerized web app + PostgreSQL infrastructure to reduce overhead from maintenance and capacity planning.

    A
    Migrate the PostgreSQL database to Amazon Aurora.
    B
    Migrate the app to EC2 instances.
    C
    Set up CloudFront for content.
    D
    Set up ElastiCache.
    E
    Migrate the app to AWS Fargate with Amazon ECS.
  25. FreePracticeQuiz.questionLabelEncryption

    Store confidential data in S3 with encryption at rest, auditing (logged key usage), and annual rotation (most efficient).

    A
    SSE-C.
    B
    SSE-S3.
    C
    SSE-KMS with manual rotation.
    D
    SSE-KMS with automatic rotation.
  26. FreePracticeQuiz.questionLabelAWS Database Migration Service (DMS)

    A company is migrating its on-premises PostgreSQL database to Amazon Aurora PostgreSQL. The on-premises database must remain online and accessible during the migration. The Aurora database must remain synchronized with the on-premises database. Which combination of actions must a solutions architect take?

    A
    Create an ongoing replication task.
    B
    Create a database backup of the on-premises database.
    C
    Create an AWS Database Migration Service (AWS DMS) replication server.
    D
    Convert the database schema by using the AWS Schema Conversion Tool (AWS SCT).
    E
    Create an Amazon EventBridge rule to monitor the database synchronization.
  27. FreePracticeQuiz.questionLabelEC2 Spot Instances

    A company runs a stateless web application in production on Amazon EC2 on-demand instances behind an ALB. Usage is heavy for 8 hours a day, moderate and steady overnight, and low on weekends. How can they minimize EC2 costs without affecting availability?

    A
    Use spot instances for the entire workload.
    B
    Use reserved instances for the baseline level of usage; use spot instances for any additional capacity.
    C
    Use on-demand instances for the baseline level; use spot instances for additional capacity.
    D
    Use dedicated instances for the baseline; use on-demand instances for additional capacity.
  28. FreePracticeQuiz.questionLabelAmazon RDS Encryption

    A company runs an OLTP workload on an unencrypted Amazon RDS DB instance. Daily snapshots are taken. How can a solutions architect ensure the database and snapshots are always encrypted moving forward?

    A
    Encrypt a copy of the latest DB snapshot; replace the existing DB instance by restoring the encrypted snapshot.
    B
    Create a new encrypted Amazon EBS volume and copy snapshots to it.
    C
    Copy snapshots and enable encryption using AWS KMS; restore to an existing DB instance.
    D
    Copy snapshots to an S3 bucket encrypted with SSE-KMS.
  29. FreePracticeQuiz.questionLabelAmazon S3 Lifecycle

    Ringtones are stored in S3 Standard and are at least 128 KB. Downloads are frequent for the first 90 days and infrequent thereafter. What is the most cost-effective way to manage this?

    A
    Configure S3 Standard-IA for the initial storage tier.
    B
    Move files to S3 Intelligent-Tiering to move objects after 90 days.
    C
    Configure S3 Inventory to move objects to S3 Standard-IA after 90 days.
    D
    Implement an S3 lifecycle policy that moves objects from S3 Standard to S3 Standard-IA after 90 days.
  30. FreePracticeQuiz.questionLabelEC2 Spot Instances

    A highly dynamic batch processing job is stateless, can be interrupted with no impact, and takes over 60 minutes. What is the most cost-effective EC2 option?

    A
    Implement EC2 spot instances.
    B
    Purchase EC2 reserved instances.
    C
    Implement EC2 on-demand instances.
    D
    Implement the processing on AWS Lambda.
Progress: 0 of 30 questions completed

Ready for the full SAA-C03-NEW exam?

Get all 497+ Questions, timed simulation, and weak-area analytics. Plans from $2.99 — credits never expire.

See pricing

Frequently Asked Questions

Are these real SAA-C03-NEW practice questions?+
Yes. These 30 questions are taken directly from our 497+ Questions pool, written and reviewed by certified practitioners. They mirror the style, difficulty, and scope of the official AWS SAA-C03-NEW exam.
Is the SAA-C03-NEW exam hard?+
The AWS Solutions Architect (New Pool) (SAA-C03-NEW) is considered a pass-mark exam (passing score: 720 out of 1000). Most candidates need 4–8 weeks of focused preparation. Use these free questions to gauge where you stand before committing to a full study plan.
How many questions are on the real SAA-C03-NEW exam?+
The official SAA-C03-NEW exam has 65 questions (50 scored, 15 unscored).
Do I need to sign up to use these questions?+
No. These 30 questions are free and require no signup. If you want timed simulation, performance analytics, and access to all 497+ Questions, our paid plans start at $2.99 per exam with credits that never expire.

Keep studying

Pass SAA-C03-NEW on your first try

Join candidates using DummyExams to practice with realistic timed exams, detailed explanations, and weak-area analytics.

Start full SAA-C03-NEW practice exam