Practice EC2 Questions Now
Start a timed practice session focusing on Amazon Elastic Compute Cloud (EC2) topics from the SAA-C03 question bank.
Start SAA-C03 Practice Quiz →How EC2 Is Really Tested in SAA-C03
EC2 questions in SAA-C03 are rarely about definitions alone. Most of them force you to choose the best compute shape under multiple constraints at once: latency, fault tolerance, patching overhead, and cost.
The exam also tests whether you can separate compute decisions from storage and network decisions. A correct answer usually combines EC2 with the right EBS layout, load balancing pattern, and scaling policy rather than treating EC2 in isolation.
When two answers both seem valid, the winning choice is usually the one that removes operational risk over time, not just the one that works today.
EC2 architecture decisions that SAA-C03 repeatedly tests
| Decision Point | Option A | Option B | Exam Takeaway |
|---|---|---|---|
| Baseline workload pattern | Burstable family (T class) for variable CPU profiles with long idle periods | General/compute-optimized family (M/C class) for sustained and predictable demand | If the scenario says frequent sustained load, avoid burst-credit risk and choose a non-burst instance family. |
| Data persistence on instance failure | EBS-backed volumes with snapshots and Multi-AZ recovery workflow | Instance store for ephemeral scratch/cache data only | If data must survive stop/terminate or AZ events, instance store is almost always a trap. |
| Resilience model | Auto Scaling group spread across multiple Availability Zones | Single instance with vertical scaling in one Availability Zone | SAA-C03 rewards multi-AZ fault tolerance first, then performance and cost tuning. |
Black Friday checkout API scaling scenario
A checkout API has unpredictable spikes, strict availability requirements, and stateful session data stored outside the instance tier.
- Use an ALB + Auto Scaling group across at least two Availability Zones.
- Keep instance boot time low with launch templates and pre-baked AMIs.
- Store state in managed services so instances remain disposable during scale events.
- Apply mixed purchase options only when interruption tolerance is clearly acceptable.
Common Exam Trap: Choosing Spot instances for critical synchronous checkout traffic without interruption mitigation is a common wrong answer pattern.
SAA-C03 EC2 Question Bank (80 Questions)
Browse all 80 practice questions covering Amazon Elastic Compute Cloud (EC2) for the SAA-C03 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.
- Question 1Design Cost-Optimized Architectures
A company currently uses Standard Reserved Instances (RIs) for their EC2 fleet. They plan to change the instance family from `m5` to `c5` to improve performance. Can they modify their current RIs?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 2Design Cost-Optimized Architectures
A company has predictable EC2 usage but wants flexibility to change instance families and regions as their application evolves. Which purchasing option provides the best cost savings with maximum flexibility?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 3Design High-Performing Architectures
A high-performance computing application requires very low network latency between instances for tight coupling of parallel processing tasks. Which EC2 placement strategy minimizes inter-instance latency?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 4Mixed
For a fleet of EC2 instances with flexible start and end times, which pricing model can provide significant savings compared to On-Demand, without the commitment of a Reserved Instance?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 5Design Cost-Optimized Architectures
A data processing job runs daily for 4-6 hours and can tolerate interruptions by resuming from checkpoints. Cost optimization is the primary concern. Which EC2 purchasing strategy minimizes costs?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 6Design Secure Architectures
A fleet of EC2 instances in a private subnet requires administrative access for troubleshooting. The security team prohibits the use of bastion hosts or opening port 22 (SSH) or 3389 (RDP) to the internet or the corporate network. Which solution provides secure console access?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 7Mixed
A financial services application processes transactions that must not be lost. The application runs on EC2 instances behind an Application Load Balancer. Which solution ensures in-flight requests are preserved during deployments?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 8Design Secure Architectures
A company must ensure that EC2 instances can only be launched with approved AMIs and specific instance types. Which solution enforces these requirements?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 9Design Secure Architectures
A company must ensure that all EC2 instances are launched with approved AMIs and specific instance types across all accounts. Which solution enforces this requirement?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 10Design High-Performing Architectures
An application running on an EC2 instance needs to put objects into an S3 bucket. What is the most secure way to grant these permissions?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 11Design Resilient Architectures
A critical EC2 instance running a legacy app becomes unresponsive due to hardware degradation. How can you automatically recover it while keeping the same Public IP, Private IP, and Instance ID?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 12Design Resilient Architectures
A critical single-instance application runs on EC2 with an Elastic IP and needs to maintain the same instance ID and network configuration if hardware fails. The application cannot be redesigned for multi-instance deployment. Which recovery strategy preserves the instance identity?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 13Mixed
A company wants all Amazon EC2 instances to automatically join its AWS Directory Service managed Active Directory domain at launch. The solution must minimize manual configuration. What should the solutions architect recommend?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 14Mixed
A company needs to inspect outbound web traffic from Amazon EC2 instances to identify malicious domains. The solution must be centrally managed and scalable. Which AWS service should the solutions architect recommend?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 15Mixed
An enterprise must ensure that all data transmitted between Amazon EC2 instances and on-premises workloads is encrypted without modifying application code. Which solution meets the requirement with minimal changes?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 16Select All That ApplyMixed
A multi-tier application runs on Amazon EC2 instances. The company wants to reduce inter-service latency and offload static content. Which combination of actions meets the requirement? (Select TWO.)
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 17Mixed
A company has a stateful application running on EC2 instances that cannot be easily refactored. The application must achieve high availability within a single Region. What should the solutions architect do?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 18Mixed
A company maintains a fleet of EC2 instances that power a high-throughput API. The company wants to optimize cost without sacrificing availability. Usage is predictable and steady. What is the MOST cost-effective approach?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 19Mixed
An enterprise runs batch jobs on EC2 instances nightly. The jobs run for 3 hours and require up to 200 instances, but during the day compute demand is minimal. The company wants to optimize cost. Which purchasing option should the solutions architect recommend?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 20Mixed
A company needs to back up hundreds of Amazon EC2 instances and on-premises VMware VMs. Backups must support granular restore and centralized management. Which service should the solutions architect choose?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 21Mixed
A company needs to grant an IAM role to an Amazon EC2 instance so that an application can read from an Amazon S3 bucket. Which IAM feature should be used to avoid storing long-term access keys on the instance?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 22Mixed
A web application is hosted on an Auto Scaling group of EC2 instances. The Security Team mandates that all instances must be patched for a specific CVE immediately. What is the MOST secure and efficient method to achieve this?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 23Mixed
You are storing secrets for an application in AWS Secrets Manager. An EC2 instance needs to retrieve these secrets at launch. How should you grant the instance the necessary permissions?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 24Mixed
You need to ensure that all EBS volumes attached to EC2 instances in your VPC are encrypted. What is the most efficient way to enforce this?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 25Mixed
Which service can be used to assess the security and compliance of your EC2 instances by analyzing the running operating system against defined best practices?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 26Select All That ApplyMixed
An application on an EC2 instance must write encrypted logs to an S3 bucket. The solution must ensure the data is encrypted in transit and at rest. Which combination is necessary? (Select TWO.)
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 27Mixed
A stateless web application is currently running on a single EC2 instance. The architecture must be modified to be highly available. Which is the MOST resilient approach?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 28Mixed
A legacy application requires a shared file system accessible from multiple EC2 instances across different Availability Zones. Which storage service should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 29Mixed
A company has several unused EBS volumes attached to stopped EC2 instances. What should be done to reduce costs?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 30Mixed
You are running a .NET application on a c5.2xlarge EC2 instance. The utilization is high, but you need to save costs. The application cannot be interrupted. What is a potential solution?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 31Design High-Performing Architectures
A company is running a web application on Amazon EC2 instances in multiple Availability Zones behind an Application Load Balancer. The application experiences variable traffic patterns with sudden spikes during business hours. The company wants to optimize costs while maintaining high availability. Which solution will meet these requirements MOST cost-effectively?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 32Design High-Performing Architectures
A company's application stores session data that needs to be shared across multiple EC2 instances. The session data must be available with microsecond latency and persist even if an instance fails. Which solution provides the BEST performance?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 33Design Secure Architectures
An application running on EC2 instances needs to access objects in an S3 bucket. The security team requires that credentials should never be stored on the instances. What is the MOST secure solution?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 34Design Cost-Optimized Architectures
A company's application experiences predictable traffic patterns with a baseline of 10 instances and peaks requiring 50 instances during business hours (9 AM - 5 PM on weekdays). What is the MOST cost-effective EC2 purchasing strategy?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 35Design Secure Architectures
A solutions architect needs to design a solution that allows developers to access EC2 instances without exposing SSH ports to the internet. Which solution is MOST secure?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 36Design High-Performing Architectures
An application requires a file system that can be accessed concurrently by thousands of EC2 instances across multiple Availability Zones with consistent performance. Which storage solution should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 37Design Resilient Architectures
A company wants to implement a solution that automatically patches EC2 instances during maintenance windows without manual intervention. Which AWS service should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 38Design Secure Architectures
A company needs to ensure that EC2 instances in a private subnet can download software updates from the internet without being directly accessible from the internet. Which solution should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 39Design High-Performing Architectures
A company runs a web application that stores user session data. The session data must be shared across multiple EC2 instances and persist if an instance fails. Which solution provides the BEST performance and reliability?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 40Design Resilient Architectures
A company wants to implement a backup strategy for EC2 instances that includes automated backups, retention policies, and cross-region backup copies. Which solution provides these capabilities with minimal management?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 41Design High-Performing Architectures
A company needs to run a Windows-based application that requires SMB file shares accessible from multiple EC2 instances. Which storage solution should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 42Design High-Performing Architectures
An application requires a file system that supports POSIX permissions, can be accessed from thousands of EC2 instances, and automatically scales storage. Which solution should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 43Design Secure Architectures
A solutions architect must design a solution that encrypts data in transit between an Application Load Balancer and EC2 instances. Which solution meets this requirement?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 44Design Secure Architectures
A company wants to implement a solution that automatically responds to security threats by isolating compromised EC2 instances. Which solution should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 45Design Secure Architectures
A solutions architect must design a solution that ensures EC2 instances in private subnets can download software updates from the internet without being directly accessible. Which solution should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 46Design Resilient Architectures
A company wants to implement a solution that automatically patches EC2 instances during maintenance windows without manual intervention. Which AWS service should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 47Design High-Performing Architectures
A company wants to run a Windows-based application that requires SMB file shares accessible from multiple EC2 instances with Active Directory integration. Which storage solution should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 48Design High-Performing Architectures
A company runs a web application that stores user session data. The session data must be shared across multiple EC2 instances and persist if an instance fails. Which solution provides the BEST performance and reliability?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 49Design Resilient Architectures
A solutions architect must design a backup strategy for EC2 instances that includes automated backups, retention policies, and cross-region backup copies. Which solution provides these capabilities with minimal management?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 50Design Secure Architectures
A company must ensure that EC2 instances can only communicate with approved AWS services and cannot access the internet. Which solution enforces this requirement?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 51Design High-Performing Architectures
An application requires a file system that can be accessed from both Linux and Windows EC2 instances with SMB and NFS protocols. Which storage solution should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 52Design Secure Architectures
A company wants to implement automated security threat detection and response for EC2 instances. Which solution should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 53Design Secure Architectures
A solutions architect must ensure EC2 instances in private subnets can download updates without internet exposure. Which solution should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 54Design Resilient Architectures
A company wants automated EC2 instance patching during maintenance windows. Which service should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 55Design High-Performing Architectures
A web application stores user session data that must be shared across EC2 instances and persist if instances fail. Which solution provides BEST performance and reliability?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 56Design Secure Architectures
A company must ensure EC2 instances only communicate with approved AWS services, not the internet. Which solution enforces this?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 57Design Secure Architectures
A Solution Architect is designing a multi-tier application. The application tier runs on EC2 instances in private subnets and needs to download software patches from the internet. However, the security policy mandates that no inbound internet connectivity is allowed to these instances, and the source IP address for outbound traffic must remain static for allow-listing by the software vendor. Which architecture satisfies these requirements?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 58Design Secure Architectures
An application uses a Lambda function to query a legacy database running on an EC2 instance in a private subnet. The database security group allows traffic only from the security group of the Lambda function. The Lambda function is configured to connect to the VPC. However, the Lambda function times out when trying to connect to the database. What is the most likely cause?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 59Design Secure Architectures
An e-commerce application running on an Application Load Balancer (ALB) and EC2 instances is facing a distributed denial-of-service (DDoS) attack (HTTP floods) and SQL injection attempts. Which combination of services provides the MOST secure and operational efficient defense?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 60Design Secure Architectures
A web application deployed on EC2 instances requires database credentials to access an Amazon Aurora database. A security audit flagged that the credentials are hardcoded in the application source code. The solution must rotate the credentials automatically every 30 days. What should the Solution Architect recommend?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 61Design Secure Architectures
A company wants to authenticate users accessing an internal web application hosted on Amazon EC2 instances behind an Application Load Balancer (ALB). The users are authenticated via a corporate OIDC (OpenID Connect) identity provider. The solution must minimize code changes on the application side. Which strategy should be implemented?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 62Design Secure Architectures
A company wants to identify if any of their EC2 instances are communicating with known malicious IP addresses or are being used for cryptocurrency mining. The solution requires no agents to be installed and must provide findings centrally. Which service should be enabled?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 63Design High-Performing Architectures
A research lab runs a tightly coupled High Performance Computing (HPC) workload on EC2 instances. The application relies on very low network latency and high internal bandwidth between nodes for MPI (Message Passing Interface) communication. Which network configuration is required?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 64Design High-Performing Architectures
An application runs on an EC2 instance and requires a storage volume that supports 20,000 IOPS and substantial throughput for a high-performance database. The database administrator wants to be able to adjust the IOPS independently of the volume size to save costs on storage capacity. Which EBS volume type should be selected?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 65Design High-Performing Architectures
A video processing application runs in an Auto Scaling Group (ASG) of EC2 instances. The workload involves processing messages from an SQS queue. The processing time per video varies significantly (from 1 minute to 1 hour). The current "Target Tracking" policy based on CPU utilization is causing the ASG to scale in prematurely, terminating instances that are still processing long videos. How should the architecture be improved?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 66Design High-Performing Architectures
A machine learning team needs a shared file system to access training datasets concurrently from multiple EC2 instances. The dataset is currently stored in an S3 bucket. The file system must provide sub-millisecond latencies and high throughput for the training phase, and changes should be written back to S3. Which service is best suited?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 67Design High-Performing Architectures
A big data application using Apache Cassandra runs on 30 EC2 instances. The architecture requires that hardware failure of a single rack should not impact the availability of the application. Which placement strategy should be used?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 68Design High-Performing Architectures
A media processing application uses up to 2,000 EC2 instances in parallel to process video files stored on Amazon EFS. The application is hitting the throughput limit of the file system, causing delays. What configuration change can alleviate this?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 69Design High-Performing Architectures
A security engineer wants to prevent traffic from the suspicious IP address 203.0.113.5 from reaching an EC2 instance. They review the inbound rules of the instance’s Security Group and confirm that no rule explicitly allows traffic from this IP. However, application logs still show incoming traffic from 203.0.113.5. What is the most likely explanation?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 70Design Cost-Optimized Architectures
A three-tier application has a Web Tier, App Tier, and DB Tier. The App Tier instances scale automatically. The DB Tier (on EC2) should only accept traffic from the App Tier instances. How should the Database Security Group be configured?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 71Design Secure Architectures
An application running on EC2 instances in a private subnet needs to access and download objects from an S3 bucket. For security reasons, the data transfer must not traverse the public internet. Which solution provides the required private connectivity?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 72Design Secure Architectures
A company has a data processing application running on EC2 instances within a VPC. The application needs to access a specific S3 bucket. The security team has mandated that the S3 bucket must only be accessible from within that VPC. How can this be enforced?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 73Design Secure Architectures
An application running on EC2 instances retrieves database credentials from AWS Secrets Manager. A new security mandate requires that these credentials be rotated every 30 days automatically, without any manual intervention or application downtime. How can this be achieved?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 74Design Secure Architectures
Your organization wants to limit privilege escalation risk from within EC2 instances. You must prevent users from retrieving instance profile credentials via IMDS unless the instance has a specific tag set by automation. Which approach accomplishes this?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 75Design Secure Architectures
An attacker obtained temporary credentials that allowed `DescribeInstances` and `DescribeVolumes` but should not be able to copy EBS snapshots. Which control prevents snapshot copying even if the IAM role has `ec2:CreateSnapshot`?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 76Design Secure Architectures
A site uses ALB with multiple EC2 instance types. Sessions must remain sticky for certain user workflows and latency must remain under 150 ms. Which ALB configuration best meets goals while maintaining resilience?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 77Design Secure Architectures
An application runs on an Auto Scaling group of EC2 instances in a single region. The application maintains session state on the local disk of each instance. You need to design a solution that can automatically fail over to another region with minimal data loss. What is the most resilient architecture?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 78Design Secure Architectures
A company needs secure shell access to EC2 instances in private subnets. Security policies prohibit SSH key management and inbound internet connectivity. Which access method meets these requirements?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 79Design High-Performing Architectures
A batch processing application runs on EC2 instances that process jobs for 2-6 hours each. The Auto Scaling Group should not terminate instances currently processing jobs during scale-in events. How should the application prevent premature termination?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz - Question 80Design High-Performing Architectures
A machine learning workload requires a high-performance shared file system with sub-millisecond latencies for training data access across multiple EC2 instances. Which file system service provides optimal performance?
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start SAA-C03 Quiz
Key EC2 Concepts for SAA-C03
SAA-C03 EC2 Exam Tips
Amazon Elastic Compute Cloud (EC2) questions in SAA-C03 are typically scenario-based. Focus on architecture trade-offs, resilience, and secure-by-default design choices. Priority concepts: ec2, instance, ami, launch template, placement group, spot.
What SAA-C03 Expects
- Anchor your answer in choose the most reliable and cost-aware architecture pattern, not just a feature match.
- EC2 scenarios for SAA-C03 are frequently mapped to Domain 1 (30%), Domain 2 (26%), Domain 3 (24%), Domain 4 (20%), so read the objective carefully before picking controls or architecture.
- Expect multi-topic scenarios where EC2 interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated question.
- When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.
High-Value EC2 Concepts
- Know the core EC2 building blocks cold: ec2, instance, ami, launch template.
- Review the edge-case features and limits for placement group, spot; these details are commonly used to differentiate answer choices.
- Practice service-integration reasoning: how EC2 pairs with Auto Scaling, EBS, ELB, VPC in real deployment patterns.
- For SAA-C03, explain why the chosen EC2 design meets reliability, security, and cost expectations better than the alternatives.
Common SAA-C03 Traps
- Watch for answers that solve today's issue but do not scale across multiple AZs.
- Questions in Design Secure Architectures often include distractors that look correct for EC2 but violate least-privilege, durability, or availability requirements.
- Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
- If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.
Fast Review Checklist
- Can you compare at least two EC2 implementation paths and justify which one best fits the scenario?
- Can you map the chosen answer back to Design Secure Architectures (30%) outcomes for SAA-C03?
- Can you explain security and access boundaries for EC2 without relying on default-open assumptions?
- Can you describe how EC2 integrates with Auto Scaling and EBS during failure, scaling, and monitoring events?