Home/Practice Test/AWS/Free SAA-C03 Practice Test 2026 | 800+ Real Exam-Style Questions

Free SAA-C03 Practice Test 2026 | 800+ Real Exam-Style Questions

Can you choose the best AWS solution under exam pressure?
Take this SAA-C03 practice test and make your next study session count.

Real Exam Style
Questions
Detailed
Explanations
All Domains
Covered
Timed
Practice
4.8919 learner reviews across Microsoft, AWS, and CompTIA tracksVerified purchases
Jump Straight to the SAA-C03 Questions (No Sign-Up or Credit Card required)
Why choose us
1
Expert Explanations + Sources Master every concept with clarity.
2
2026-Fresh Questions Always current, never outdated.
3
Real Exam Simulation Practice like you'll test.
4
90-Day Free Updates Stay ahead of changes.
5
Start in 60 Seconds No waiting, instant access.

SAA-C03 exam at a glance

AWS Certified Solutions Architect – Associate · Associate level

Exam codeSAA-C03
CertificationAWS Certified Solutions Architect – Associate
LevelAssociate
Number of questions65 total (50 scored + 15 unscored); unscored questions are not identified during the exam
Duration130 minutes
Passing score720 out of 1,000 (scaled scoring)
Question formatsMultiple choice (one correct answer from four options); multiple response (two or more correct answers from five or more options)
DeliveryPearson VUE testing center or online proctored
Exam cost$150 USD (AWS publishes this on the scheduling/registration flow; not stated in the exam guide PDF itself)
LanguagesEnglish, French (France), Italian, Japanese, Korean, Portuguese (Brazil), Simplified Chinese, Spanish (Latin America), Spanish (Spain), Traditional Chinese
Certification validity3 years; recertify by passing SAA-C03 again or a higher-level AWS certification
Retake policyMust wait 14 calendar days before retaking; full exam fee applies to each attempt
PrerequisitesNone required; AWS recommends at least 1 year of hands-on experience designing AWS cloud solutions

Intended for individuals who perform a solutions architect role with at least 1 year of hands-on experience designing cloud solutions using AWS services.

Skills measured and their weighting

Skill areaWeight
Design Secure Architectures30%
Design Resilient Architectures26%
Design High-Performing Architectures24%
Design Cost-Optimized Architectures20%

Source: aws.amazon.com — official SAA-C03 exam page. Figures on this page were checked against Amazon Web Services (AWS)’s official documentation. Amazon Web Services (AWS) can change exam length, cost and scoring without notice, so confirm the details there before you book.

Sit the whole exam before you sit the whole exam

The full bank covers every domain, with timed mode and per-domain scoring.

Premium
Timed mode Per-domain score tracking Unlimited free updates PDF + Practice Test
Get the full bank 30-day money back

SAA-C03 Practice Questions By Domains

4 domains covered

2. Design High-Performing Architectures

28 free questions available

Start Practice

4. Design Cost-Optimized Architectures

20 free questions available

Start Practice
Premium 100 of 867 free

Practice the full exam, not a sample

Unlock the full bank and practise every domain end to end.

Unlock all 867 questions

How to actually use this practice set

Start with a baseline attempt, not a study binge. Take a full run through the questions before you’ve reviewed anything, and let the score be honest information rather than a judgment on you. It tells you where your real gaps sit, not where you assume they sit.

Then read every explanation, not just the ones for questions you missed. The explanation on a question you got right often tells you why the other options are wrong, and that reasoning is exactly what carries over to a stem you haven’t seen before.

Look at your baseline by domain and go straight to the one where you scored lowest. Scenario questions on this exam rarely test a single service in isolation. They describe a business situation, a constraint, and one or two competing priorities, then ask you to pick the option that satisfies all of them. Some questions ask for more than one correct response out of five or more choices, so partial recall isn’t enough. Memorizing a list of services and their features won’t get you through a question built around trade-offs; you need to reason about which service fits which constraint, not just recognize a name.

Finish with a timed, full-length run once you’re consistently strong across domains. That’s the closest rehearsal you can do for the pacing and fatigue of the real thing.

How we build every question

Every question starts from a task statement in the published objectives, not from a guess about what might come up. We map each item to a specific domain and task, then weight the set so the domains show up in roughly the proportion the blueprint specifies. That means you spend more time on secure-architecture questions than on cost questions, because that’s where the real exam puts its weight too.

The people writing these hold the credential themselves, so the scenarios come from what actually trips candidates up, not from a keyword search of service names. Every answer, right or wrong, gets an explanation with a reference back to the underlying documentation, so you can go verify it yourself rather than take our word for it.

A second reviewer checks each question before it goes live, looking for ambiguous wording, multiple defensible answers, or a distractor that’s actually plausible enough to be correct. When the objectives are revised, we update the affected questions rather than letting old content sit in the set.

Who’s taking this exam, and why

Most people who sit this exam are working toward, or already doing, a solutions architect role — sometimes titled cloud architect, infrastructure architect, or just “the person who designs how this runs on AWS.” Cloud engineers, systems administrators moving into architecture, and developers who’ve started owning infrastructure decisions take it too.

The published guidance points to around a year of hands-on experience designing cloud solutions on AWS, but plenty of candidates prepare for it with less, often after starting with the Cloud Practitioner certification to build a base first.

For an employer, this credential signals that you can weigh trade-offs across security, resilience, performance, and cost, and land on a defensible design rather than just naming services you’ve heard of. That’s a different skill from operating a service someone else already designed. People go after it because it’s the most widely recognized starting point for an AWS-focused career, and because the reasoning it tests carries directly into real design work.

What the four domains actually test

The exam is broken into four domains, each with its own task statements and weighting, detailed in full in the official exam guide. Here’s what each one actually asks of you, and where candidates tend to trip.

Design Secure Architectures (30% of scored content)

This is the heaviest domain, covering identity and access management, network security inside a VPC, and data protection through encryption and key management. You’ll be asked to design access strategies across multiple accounts, choose between IAM roles, resource policies, and federation, and decide how to secure both application traffic and data at rest.

Where candidates slip: mixing up what identity-based policies and service control policies actually do. A service control policy sets the ceiling on what’s possible in an account; it never grants permission on its own. A user or role still needs an identity-based or resource-based policy to do anything, even inside an account whose policy allows it. Missing that distinction leads to picking the wrong control for a question that’s really asking about granting access.

Design Resilient Architectures (26% of scored content)

This domain is about keeping a workload running through failure and scaling it without tight coupling. Expect questions on queuing and event-driven design, load balancing, multi-tier architectures, and disaster recovery strategies like pilot light and warm standby, each with its own recovery time and recovery point trade-offs.

Where candidates slip: treating a Multi-AZ database deployment and a read replica as the same idea. Multi-AZ gives you a synchronous standby for failover and availability; it doesn’t help with read traffic. A read replica scales reads and, outside a couple of exceptions, doesn’t fail over automatically. A question about read-heavy traffic and one about surviving an Availability Zone outage call for different answers, even when both mention the same database service.

Design High-Performing Architectures (24% of scored content)

This domain covers picking the right compute, storage, database, and networking option for a given performance requirement, plus data ingestion and transformation for analytics workloads. You’ll weigh instance families, storage types, caching layers, and content delivery against stated latency, throughput, or capacity needs.

Where candidates slip: reaching for the fastest-sounding option instead of the one that matches the access pattern described in the question. High-IOPS storage isn’t the answer to every performance question, and a caching layer in front of a database solves a different problem than a content delivery network in front of static assets. Read the access pattern before you pick the service.

Design Cost-Optimized Architectures (20% of scored content)

This domain asks you to keep the design from the other three domains affordable, through the right storage tier, purchasing option, database engine, and network routing choice. Expect scenarios comparing spot capacity, reserved commitments, and savings plans, plus questions about gateway and data transfer costs.

Where candidates slip: picking the cheapest option without checking whether it breaks a requirement stated earlier in the same scenario. A single shared NAT gateway is cheaper than one per Availability Zone, but it also creates a single point of failure that can conflict with a resilience requirement in the same question. The NAT gateway documentation is worth a careful read for exactly this trade-off.

Booking, cost and retakes

The base fee is 150 USD, though the vendor doesn’t publish a single global rate — pricing varies by country and by testing provider, so check the current number before you book. You book through your AWS Certification Account, choosing a Pearson VUE testing center or an online proctored session.

If you don’t pass, you can retake the exam after a 14 calendar-day wait, with no cap on total attempts, though you pay the full fee again each time. Passing earns you a discount voucher toward your next AWS exam, and the certification itself stays valid for three years, after which you recertify by passing the current version or by earning the Professional-level credential above it. Full policy detail sits on the official exam page.

Is the SAA-C03 worth holding?

This is one of the most widely held AWS credentials above entry level, and that’s not an accident. It sits at the point where you’ve moved past knowing what AWS services are and into deciding which ones solve a given problem, under real constraints like cost and uptime.

Holding it signals to an employer that you can be handed a business requirement and come back with a design, not just a list of services. It also opens the door to Professional and Specialty tiers if you want to keep going, since several of them assume this level of reasoning as a baseline.

It won’t replace hands-on experience, and it isn’t a promise of a new job or a raise. What it does is put a recognized, verifiable marker next to skills you may already be building on the job.

What you get when you buy in

Buy in, and you get the full bank of practice questions mapped to all four domains, each one with an explanation for every answer choice and a reference back to the relevant documentation, so you understand the reasoning instead of just memorizing an outcome.

Study in timed mode to rehearse real exam pacing, or work through explanations at your own speed. Domain-level tracking shows you where you’re strong and where you’re not, so your next study session has a target instead of a guess.

You get 90 days of free updates from the date of purchase, so if the objectives shift, your set shifts with them. Access starts immediately after checkout, and if the set isn’t right for you, we offer a 30-day money-back guarantee, no conditions attached.

Common questions about the SAA-C03

Are these the real SAA-C03 exam questions?

No. Every question here is original, written by Edurely from the published exam objectives. There’s no vendor material, no leaked content, and nothing reproduced from an actual test form. What you get is modeled closely on how the exam blends multiple choice and multiple response items and how it frames scenarios, but the wording and the scenarios themselves are entirely our own.

What’s the passing score for the SAA-C03?

Results are reported as a scaled score from 100 to 1,000, and you need 720 to pass. The exam uses a compensatory model, so a weak domain doesn’t sink you on its own as long as your overall score clears 720.

How much does the exam cost, and where do I book it?

The base fee is 150 USD, though your local price may differ from that. You book through your AWS Certification Account and sit the exam at a Pearson VUE center or online with a proctor.

What happens if I don’t pass on the first try?

You wait 14 calendar days, then you can book again. There’s no limit on attempts, but you pay the exam fee in full each time, so it’s worth using the wait to close your weakest domain rather than re-sitting cold.

How long should I study for the SAA-C03?

It depends on how much hands-on AWS work you’ve already done. Someone with production experience across compute, storage, networking, and databases needs less time than someone starting from documentation alone. Track your domain scores as you go and let them tell you when you’re ready, rather than aiming for a fixed number of weeks.

Do you update the questions when AWS changes the exam?

Yes. When the objectives are revised, we update the questions that are affected rather than letting the set drift out of date.

Are practice questions enough on their own?

They’re one of the most effective parts of a study plan, especially for a scenario-heavy exam like this one. Pair them with the vendor’s own learning path and real hands-on time in the services you’re being tested on — deploying a VPC, configuring Auto Scaling, setting up a Multi-AZ database — and you give yourself the best chance of passing on your first attempt.

Edurely is not affiliated with or endorsed by Amazon Web Services, and AWS and SAA-C03 are trademarks of Amazon Web Services, Inc. or its affiliates.

Top 14 Most Challenging SAA-C03 Questions

Question 1
Domain: Design High-Performing Architectures
An application uses an Amazon RDS for PostgreSQL Multi-AZ DB instance and experiences high read latency due to heavy traffic. Which approach improves read performance?
  • A. Turn on Amazon RDS Performance Insights and enable auto-scaling storage.
  • B. Switch the DB to use DynamoDB Accelerator (DAX).
  • C. Create a read replica and serve reads from it.
  • D. Add Amazon Data Firehose between the app and RDS to increase concurrency.
Question 2
Domain: Design Resilient Architectures
An e-commerce site runs on EC2 instances behind an ALB across three AZs in an Auto Scaling group. Some users are incorrectly redirected to the login page after authentication. What solution prevents authenticated users from being sent to login again?
  • A. Terminate certain EC2 instances manually and let Auto Scaling replace them.
  • B. Route traffic to the correct instance by using the IPv4 address of the registered target in the target group.
  • C. Enable session affinity (sticky sessions) at the target group level.
  • D. Configure ALB to route all traffic to a single EC2 instance in the target group.
Question 3
Domain: Design Cost-Optimized Architectures
A new app uses a relational database for user data and config. With steady growth and variable read-heavy workload with occasional writes, which cost-effective AWS managed database solution fits best?
  • A. Run the database on Amazon RDS with Provisioned IOPS SSD storage.
  • B. Use Amazon Aurora Serverless to scale capacity automatically with actual usage.
  • C. Use Amazon DynamoDB with on-demand capacity mode.
  • D. Run the database on Amazon RDS with magnetic storage and read replicas.
These are the hard ones. There are 853 more. Every question explains why the wrong answers are wrong, with a link to official docs.
Get all 867 questions
Question 4
Domain: Design Secure Architectures
A financial firm must keep log data for 1 year in S3 and prevent any deletion or overwriting during that period, while keeping data readable.
  • A. Enable S3 Versioning and use Object Lock in compliance mode for 1 year.
  • B. Enable S3 Transfer Acceleration and move objects to Glacier after 1 year.
  • C. Enable S3 Versioning and move objects to Glacier after 1 year.
  • D. Create a Lambda to check timestamps and move old data to Glacier Deep Archive if older than 1 year.
Question 5
Domain: Design High-Performing Architectures
During migration to AWS, vendors using legacy systems need to continue uploading via SFTP. The application uses S3 APIs, but some vendors don’t. Which approach requires the least operational overhead?
  • A. Set up AWS DMS to replicate vendor storage to S3 and give vendors access to DMS.
  • B. Create an AWS Transfer Family endpoint for legacy vendors.
  • C. Run an SFTP server on EC2 and have legacy vendors upload there.
  • D. Provide S3 File Gateway to vendors for SMB file shares.
Question 6
Domain: Design Resilient Architectures
A web app uses RDS MySQL. An employee accidentally edited data, and the company must recover to a point in time within the last 30 days with max 5 minutes of data loss. Which solution satisfies this?
  • A. Read replicas
  • B. Manual snapshots
  • C. Automated backups
  • D. Multi-AZ deployments
Question 7
Domain: Design Cost-Optimized Architectures
To archive an on-premises relational database while keeping data for reporting with minimal operations, which option is best?
  • A. Migrate the on-prem DB to RDS via AWS DMS and retire the on-prem DB; keep RDS stopped until reports needed.
  • B. Replicate on-prem DB to an EC2 instance, retire on-prem, snapshot EC2 and keep it stopped until reports needed.
  • C. Back up on-prem data, transfer to S3 with DataSync, move to Glacier Deep Archive, and restore to EC2 for reports.
  • D. Migrate on-prem databases to S3 in Parquet via DMS, store in Glacier Flexible Retrieval, and run reports with Athena.
Question 8
Domain: Design Secure Architectures
For a two-tier web app with an internet-facing ALB routing to EC2 instances in an ASG, which design keeps internet access limited to the minimum while allowing EC2 and RDS to be reached?
  • A. Place ALB, EC2, and RDS in private subnets.
  • B. Place ALB in public subnets; place EC2 and RDS in private subnets.
  • C. Place ALB and EC2 in public subnets; place RDS in private subnets.
  • D. Place ALB outside the VPC; place EC2 and RDS in private subnets.
Question 9
Domain: Design High-Performing Architectures
A company needs cloud storage with low-latency access for frequently accessed data and the ability to retrieve data easily, while migrating from on-premises block storage. Which option provides the most operational efficiency?
  • A. Use S3 File Gateway with SMB access for immediate file retrieval.
  • B. Use Storage Gateway Volume Gateway in cached mode with iSCSI targets.
  • C. Use Storage Gateway Volume Gateway in stored mode with iSCSI targets.
  • D. Use Tape Gateway to store virtual tapes in S3.
Question 10
Domain: Design Resilient Architectures
To deploy a resilient web app on AWS, which architecture best combines EC2, RDS, and S3 with multi-AZ, auto scaling, and a content delivery network for static assets?
  • A. Single-AZ EC2 and RDS; S3 with versioning for assets.
  • B. Auto Scaling EC2 across multiple AZs; Multi-AZ RDS; CloudFront for assets.
  • C. Single-AZ EC2; RDS in another AZ; assets served from EC2.
  • D. Serverless with Lambda, Aurora Serverless v2, and EFS One Zone-IA for assets.
Question 11
Domain: Design Cost-Optimized Architectures
A photo-sharing site stores millions of photos and needs durable storage with lifecycle-based cost optimization; most photos aren’t accessed after 30 days. What is the most cost-effective approach?
  • A. Store in EFS and back up with PITR; keep older photos for restore.
  • B. Store in S3 and use Lifecycle rules to move older than 30 days to Intelligent-Tiering.
  • C. Store in DynamoDB with backups; keep older data for PITR.
  • D. Store in FSx for Lustre with backups and PITR.
Question 12
Domain: Design Secure Architectures
A video streaming app in a VPC uses an NLB for TCP traffic. There have been unauthorized access attempts. What change minimally alters the architecture but enhances security?
  • A. Apply WAF rules directly to the NLB.
  • B. Recreate the NLB with a security group that allows only trusted IPs.
  • C. Add a second NLB with a strict IP allow list.
  • D. Enable AWS Shield Advanced for enhanced DDoS protection.
Question 13
Domain: Design High-Performing Architectures
An API must translate text between languages, read a header value, and call an embedded library. Translation completes in 6 minutes and a custom authorization is required. Which option fits best?
  • A. API Gateway REST with AWS_PROXY to a Lambda function synchronously.
  • B. Lambda with a function URL to call a second function synchronously.
  • C. API Gateway REST with AWS_PROXY to a second Lambda function synchronously.
  • D. API Gateway REST with HTTP PROXY to a web endpoint on EC2 synchronously.
Question 14
Domain: Design Resilient Architectures
How can several microservices exchange messages so that each message is processed exactly once and in the same order, with the least operational effort?
  • A. Use an SQS FIFO queue for inter-service messaging.
  • B. Use SNS topics to connect services and publish/subscribe.
  • C. Use an SQS standard queue with EventBridge for routing.
  • D. Use MSK on EC2 to run Kafka for the application.
Disclaimer: Edurely is an independent educational platform. We are not affiliated with, authorized by, endorsed by, or in any way officially connected to AWS . Full disclaimer
Edurely
Curated By Edurely Team

The Edurely Team comprises certified professionals and subject matter experts dedicated to delivering accurate, up-to-date exam preparation materials. We rigorously review every resource to ensure it aligns with the latest industry standards and certification objectives to help you succeed.