EnglishDeutschFrançaisEspañolPortuguês

AWS · SAA-C03 · Intermediate

AWS Solutions Architect - Associate (SAA-C03) — Practice Questions and Mock Exam

Prepare for SAA-C03 with original practice questions and clear answer explanations. Ask Alex, your AI tutor, when you need more detail, use your results to identify topics to review, and practice your pacing with timed mock exams.

65Mock exam questions
130minTime limit
720/ 1000Passing score

Checked against AWS · September 2026 · Current exam version

About the exam

The AWS Certified Solutions Architect – Associate validates the ability to design and deploy scalable, highly available, and fault-tolerant systems on AWS. It covers architectural best practices across compute, storage, networking, databases, security, and cost optimization using the AWS Well-Architected Framework.

This certification is ideal for solutions architects, cloud engineers, and IT professionals with at least one year of hands-on AWS experience. It demonstrates practical ability to select appropriate AWS services, design resilient multi-tier architectures, and implement secure, cost-effective cloud solutions.

Try five SAA-C03 questions

Try five practice questions from the app’s current AWS Certified Solutions Architect - Associate question bank, with answers and explanations.

Design Resilient Architectures2 / 5

A company is running an Amazon ElastiCache for Redis OSS cluster with a single node. The cluster is critical for application performance, serving as a session store and data cache. What should a solutions architect do to improve the availability of this cache layer?

AlexFull explanation from Alex

For production ElastiCache for Redis OSS workloads that need high availability, use a replication group with Multi-AZ and automatic failover. Multi-AZ requires at least one available read replica and automatically promotes a replica if the primary cannot serve traffic. This is the managed HA pattern; increasing instance size or relying only on backups does not remove the single-node failure point.

Sourcedocs.aws.amazon.com

Design High-Performing Architectures3 / 5

A media company serves large video files to users globally. Users in Asia and Europe report slow download speeds. The videos are stored in an Amazon S3 bucket in us-east-1. Which solution will MOST improve download performance for global users?

AlexFull explanation from Alex

CloudFront is AWS's CDN service for delivering content globally. It routes users to a nearby point of presence, checks the cache, and returns cached objects when available. This is the durable architecture for improving repeated downloads of large static media stored in S3. S3 Transfer Acceleration primarily helps clients upload to S3, and cross-Region replication requires additional routing logic and duplicate storage.

Sourcedocs.aws.amazon.com

Design Secure Architectures4 / 5

A company wants to ensure that all Amazon EC2 instances launched in its AWS accounts are tagged with a 'CostCenter' tag. Instances without this tag should not be allowed to launch. Which approach provides this enforcement at the organization level?

AlexFull explanation from Alex

Service Control Policies (SCPs) in AWS Organizations set maximum permissions across member accounts. An SCP denying ec2:RunInstances when aws:RequestTag/CostCenter is missing prevents any EC2 instance from launching without the required tag—providing preventive enforcement at the organization level. Tag policies validate tag compliance but don't block resource creation. IAM policies per account require individual management and can be circumvented. AWS Config rules detect non-compliance after the fact (detective, not preventive) and terminating instances is disruptive. SCPs with request tag conditions provide centralized, preventive enforcement that cannot be bypassed by account administrators. This is the only option that truly prevents untagged launches.

Sourcedocs.aws.amazon.com

429 practice questions

The Pass-IT question pool gives you material to practice for SAA-C03. A Pass-IT mock exam uses 65 questions and a 130-minute time limit; these are practice settings.

Pool details: SAA-C03

Exam details checked against AWSSeptember 6, 2026

date of the last check against the official AWS source

Passing score720 / 1,000

as published by AWS

Objectives in the guide14 objectives listed in the official guide

across 4 domains in the official exam guide

Pool size429 questions

= The pool size is equivalent to 6 sets of 65 questions; this does not mean that each mock exam uses a separate set.

Blueprint domains4 domains in the exam blueprint

Design Secure Architectures 113 · Design Resilient Architectures 93 · Design High-Performing Architectures 116 · Design Cost-Optimized Architectures 107

Recorded as checked against sources429 of 429

questions recorded as having their answer, options, and explanation checked against official AWS documentation

What's on the exam

Design Secure Architectures carries the most weight at 30%, covering identity federation across accounts, VPC-level network security, and data encryption and key management. Design Resilient Architectures follows at 26%, testing scalable and loosely coupled patterns (microservices, containers, serverless, messaging) alongside strategies spread across multiple Availability Zones and Regions for high availability and disaster recovery.

Design High-Performing Architectures takes 24%, spanning storage, compute, database, network, and data-ingestion choices under performance constraints. Design Cost-Optimized Architectures closes the blueprint at 20%, and it isn't a separate skill from the other three domains so much as a constraint layered on top of them: the exam regularly asks for the cheapest architecture that still satisfies a security or resilience requirement stated earlier in the same question.

Exam blueprint: SAA-C03

Design Secure Architectures30%

Federate identity across multiple accounts to control who can reach AWS resources, isolate workloads behind VPC security groups and network segmentation, and decide how data gets encrypted, keyed, and backed up.

≈ 15 h
Design Resilient Architectures26%

Design scalable, loosely coupled architectures using microservices, containers, serverless patterns, and messaging services, and design highly available and fault-tolerant architectures using multi-AZ and multi-Region strategies and appropriate disaster recovery approaches.

≈ 13 h
Design High-Performing Architectures24%

Determine high-performing storage, compute, and database solutions for a workload, and design network architectures and data ingestion and transformation pipelines that scale to meet performance requirements.

≈ 12 h
Design Cost-Optimized Architectures20%

Design cost-optimized storage, compute, database, and network architectures using AWS purchasing options, storage tiering, and cost management tools such as Cost Explorer and Budgets.

≈ 10 h

Exam format and question types

The exam draws 65 questions (50 scored, 15 unscored) from multiple-choice and multiple-response formats inside a 130-minute window. Questions are heavily scenario-based, describing a real-world architecture requirement and asking for the best AWS approach among several technically valid options. At roughly 2 minutes per question, reading for the specific constraint (cost, latency, compliance) matters more than recognizing the services involved.

Question types: SAA-C03

Multiple Choice70%

Select the single answer that best meets the question’s requirements.

Multiple Response30%

Select multiple answers. Follow the question’s instructions on how many to choose.

See AWS for official question-format information. The shares shown describe the Pass-IT practice pool; they do not establish the proportions on the official exam.

Preparing for SAA-C03

The exam runs through Pearson VUE, either at a testing center or online with a remote proctor, and is offered in English, French, Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America and Spain), Simplified Chinese, and Traditional Chinese. Certification holds for 3 years; renewal means passing a recertification exam before it expires, or earning a higher-level AWS certification, which renews it automatically.

Preparation and logistics: SAA-C03

Preparation

Illustrative study time30–75 h

illustrative planning range: 30 h with relevant experience to 75 h when starting out; your needs may fall outside this range

LevelIntermediate

Taking and maintaining the certification

DeliveryPearson VUE testing center or online proctored exam
Retake policy14-day waiting period between exam attempts, no limit on total number of attempts
Certification validity3 years

Pass a recertification exam before the 3-year expiration date, or earn a higher-level AWS certification to automatically renew

Common pitfalls

Topics to review: SAA-C03

  1. 01Over-Engineering

    Choosing the most complex multi-service solution when a simpler, more cost-effective AWS-managed option meets all the stated requirements.

  2. 02Ignoring Cost

    Selecting technically correct but unnecessarily expensive architectures when the question explicitly asks for cost optimization.

  3. 03Storage Selection

    Confusing when to use S3, EBS, EFS, and FSx based on access patterns, performance requirements, and cost constraints.

  4. 04Availability vs Durability

    Conflating high availability with data durability and selecting the wrong replication or backup strategy as a result.

  5. 05VPC Misconfigs

    Misunderstanding subnet routing, NAT gateways, security groups, and NACLs leads to wrong answers on networking architecture questions.

Frequently asked questions

How long is the AWS Certified Solutions Architect - Associate exam?

The SAA-C03 exam has 65 questions and a 130-minute time limit.

What is the passing score for AWS Certified Solutions Architect - Associate?

The passing score for the SAA-C03 exam is 720 / 1000.

Which pitfalls should I review when preparing for AWS Certified Solutions Architect - Associate?

Topics to review include Over-Engineering, Ignoring Cost, Storage Selection, Availability vs Durability, VPC Misconfigs. Work through examples to check that you understand the distinctions and can explain your answer.

How do you pass SAA-C03?

The exam is scenario-based, so recognising service names is not enough: every question hands you requirements and asks which architecture meets them. Design secure architectures is the largest domain at 30%, and the catalog budget is around 50 hours. AWS does not publish a pass rate for any of its exams, so any figure you find online is somebody guessing.

How is SAA-C03 weighted?

Design secure architectures is the heaviest domain at 30%, then resilient architectures at 26%, high-performing architectures at 24% and cost-optimized architectures at 20%. The weighting is deliberately flat. Security still edges the others, which is why identity and encryption turn up inside scenarios that look like storage or networking problems.

Does SAA-C03 expire?

Yes, three years after you pass. You renew by retaking the current version before the expiry date, or by earning a higher-level AWS certification such as SAP-C02, which renews it for you.

What comes after SAA-C03?

SAP-C02 is the direct step up for architects, and passing it renews SAA-C03. DOP-C02 fits better if you are moving towards pipelines and operations, and SCS-C03 if security is becoming the whole job. All three are open to book without SAA-C03 first.

Do you need CLF-C02 before SAA-C03?

No. AWS sets no prerequisite, so SAA-C03 can be your first exam. Cloud Practitioner is worth the 25-hour detour if AWS vocabulary is still new; if you already run workloads it adds a sitting and little else.

One certification, 12 months

Practice for SAA-C03

Focus your practice on one certification, or choose Pro to practice across all certifications.

Start a free practice sessionTry the first 20 questions without a card to see whether the practice suits you.

For eligible purchases: money-back guarantee if you fail your exam.

View guarantee terms →