Question 1
A company needs to allow an EC2 instance to read objects from an S3 bucket without embedding AWS credentials in the application. What is the recommended approach?
Correct Answer:
Assign an IAM role to the EC2 instance with the required S3 permissions
Question 2
An IAM policy contains the following statement: `{"Effect": "Deny", "Action": "s3:DeleteObject", "Resource": "*"}`. A user has another policy that grants `s3:DeleteObject`. What happens when the user attempts to delete an S3 object?
Correct Answer:
The delete is denied because Deny always overrides Allow
Question 3
A developer needs temporary access to an AWS account owned by a different company to perform a security audit. Which IAM feature enables this without creating a permanent user in the target account?
Correct Answer:
IAM cross-account role with an external ID
Question 4
A security team wants to ensure that no IAM principal in an AWS account can disable CloudTrail logging, even if they have full admin privileges. What is the most effective solution?
Correct Answer:
Use AWS Organizations Service Control Policies (SCPs) to deny cloudtrail:StopLogging
Question 5
A company uses AWS Organizations with multiple accounts. A solutions architect needs to prevent developers in sandbox accounts from launching EC2 instances larger than t3.medium. Which approach satisfies this requirement with the least operational overhead?
Correct Answer:
Apply an SCP at the Organizational Unit (OU) level that denies ec2:RunInstances for instance types larger than t3.medium
Question 1
Exam overview

About this Exam

Prepare with the AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam practice quiz. This question bank includes 100 questions covering company, application, needs, amazon, and data. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam

This practice set contains 100 questions from the matching question bank and focuses on company, application, needs, amazon, and data. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions