EnglishDeutschFrançaisEspañolPortuguês

AWS · SAA-C03 · Intermediate

AWS Solutions Architect - Associate (SAA-C03) — Practice Questions and Mock Exam

Practice with realistic SAA-C03 questions aligned to the exam objectives. Alex explains every answer, and your readiness score shows what to study next.

65Questions
130minTime Limit
720/ 1000Pass Score

Checked against AWS · September 2026Current exam version

About the exam

The AWS Certified Solutions Architect – Associate validates the ability to design and deploy scalable, highly available, and fault-tolerant systems on AWS. It covers architectural best practices across compute, storage, networking, databases, security, and cost optimization using the AWS Well-Architected Framework.

This certification is ideal for solutions architects, cloud engineers, and IT professionals with at least one year of hands-on AWS experience. It demonstrates practical ability to select appropriate AWS services, design resilient multi-tier architectures, and implement secure, cost-effective cloud solutions.

What's on the exam

Design Secure Architectures carries the most weight at 30%, covering identity federation across accounts, VPC-level network security, and data encryption and key management. Design Resilient Architectures follows at 26%, testing scalable and loosely coupled patterns (microservices, containers, serverless, messaging) alongside strategies spread across multiple Availability Zones and Regions for high availability and disaster recovery.

Design High-Performing Architectures takes 24%, spanning storage, compute, database, network, and data-ingestion choices under performance constraints. Design Cost-Optimized Architectures closes the blueprint at 20%, and it isn't a separate skill from the other three domains so much as a constraint layered on top of them: the exam regularly asks for the cheapest architecture that still satisfies a security or resilience requirement stated earlier in the same question.

Exam blueprint: SAA-C03

Design Secure Architectures30%

Federate identity across multiple accounts to control who can reach AWS resources, isolate workloads behind VPC security groups and network segmentation, and decide how data gets encrypted, keyed, and backed up.

≈ 15 h
Design Resilient Architectures26%

Design scalable, loosely coupled architectures using microservices, containers, serverless patterns, and messaging services, and design highly available and fault-tolerant architectures using multi-AZ and multi-Region strategies and appropriate disaster recovery approaches.

≈ 13 h
Design High-Performing Architectures24%

Determine high-performing storage, compute, and database solutions for a workload, and design network architectures and data ingestion and transformation pipelines that scale to meet performance requirements.

≈ 12 h
Design Cost-Optimized Architectures20%

Design cost-optimized storage, compute, database, and network architectures using AWS purchasing options, storage tiering, and cost management tools such as Cost Explorer and Budgets.

≈ 10 h

Exam format and question types

The exam draws 65 questions (50 scored, 15 unscored) from multiple-choice and multiple-response formats inside a 130-minute window. Questions are heavily scenario-based, describing a real-world architecture requirement and asking for the best AWS approach among several technically valid options. At roughly 2 minutes per question, reading for the specific constraint (cost, latency, compliance) matters more than recognizing the services involved.

Question types: SAA-C03

Multiple Choice70%

Pick the single best answer from four or five options — the exam's bread and butter.

Multiple Response30%

More than one answer is correct and you need all of them; the question tells you how many to pick.

AWS confirms these question types — a percentage split is not published; the shares reflect our exam-aligned question pool.

Try five SAA-C03 questions

Five questions straight from our AWS Certified Solutions Architect - Associate pool. Answer one — Alex explains the why.

Design Resilient Architectures2 / 5

A company is running an Amazon ElastiCache for Redis OSS cluster with a single node. The cluster is critical for application performance, serving as a session store and data cache. What should a solutions architect do to improve the availability of this cache layer?

AlexFull explanation from Alex

For production ElastiCache for Redis OSS workloads that need high availability, use a replication group with Multi-AZ and automatic failover. Multi-AZ requires at least one available read replica and automatically promotes a replica if the primary cannot serve traffic. This is the managed HA pattern; increasing instance size or relying only on backups does not remove the single-node failure point.

Sourcedocs.aws.amazon.com

Design High-Performing Architectures3 / 5

A media company serves large video files to users globally. Users in Asia and Europe report slow download speeds. The videos are stored in an Amazon S3 bucket in us-east-1. Which solution will MOST improve download performance for global users?

AlexFull explanation from Alex

CloudFront is AWS's CDN service for delivering content globally. It routes users to a nearby point of presence, checks the cache, and returns cached objects when available. This is the durable architecture for improving repeated downloads of large static media stored in S3. S3 Transfer Acceleration primarily helps clients upload to S3, and cross-Region replication requires additional routing logic and duplicate storage.

Sourcedocs.aws.amazon.com

Design Secure Architectures4 / 5

A company wants to ensure that all Amazon EC2 instances launched in its AWS accounts are tagged with a 'CostCenter' tag. Instances without this tag should not be allowed to launch. Which approach provides this enforcement at the organization level?

AlexFull explanation from Alex

Service Control Policies (SCPs) in AWS Organizations set maximum permissions across member accounts. An SCP denying ec2:RunInstances when aws:RequestTag/CostCenter is missing prevents any EC2 instance from launching without the required tag—providing preventive enforcement at the organization level. Tag policies validate tag compliance but don't block resource creation. IAM policies per account require individual management and can be circumvented. AWS Config rules detect non-compliance after the fact (detective, not preventive) and terminating instances is disruptive. SCPs with request tag conditions provide centralized, preventive enforcement that cannot be bypassed by account administrators. This is the only option that truly prevents untagged launches.

Sourcedocs.aws.amazon.com

300 questions, built like the exam

Every domain of the SAA-C03 exam has enough questions in the pool to practice it in depth. A mock exam asks 65 questions in one sitting, on the same 130-minute clock as the real thing.

Audit record: SAA-C03

Spec check against AWSSeptember 6, 2026

last verified against the official AWS source

Pass mark720 / 1,000

as published by AWS

Blueprint coverage14 official objectives

across 4 domains, from the official exam guide

Pool size300 questions

= 4 full practice exams of 65 questions each — never the same question twice

Domain coverageall 4 domains at official weight

Design Secure Architectures 90 · Design Resilient Architectures 79 · Design High-Performing Architectures 71 · Design Cost-Optimized Architectures 60

Canonically validated300 of 300

each verified against official AWS documentation — answer, options and explanation, source cited

Methodology openly documented.How questions are made →

Preparing for SAA-C03

How long you'll need depends on how much hands-on experience you bring. The rest is set by the vendor: how the exam is delivered, how soon you can retake it, and how long the credential stays valid.

The exam runs through Pearson VUE, either at a testing center or online with a remote proctor, and is offered in English, French, Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America and Spain), Simplified Chinese, and Traditional Chinese. Certification holds for 3 years; renewal means passing a recertification exam before it expires, or earning a higher-level AWS certification, which renews it automatically.

Your plan: SAA-C03

Preparation

Study time30–75 h

typically around 30 h if you already work with this stack, around 75 h coming to it fresh

LevelIntermediate

Exam day & after

DeliveryPearson VUE testing center or online proctored exam
Retake policy14-day waiting period between exam attempts, no limit on total number of attempts
Stays valid3 years

Pass a recertification exam before the 3-year expiration date, or earn a higher-level AWS certification to automatically renew

The hours are our own planning estimate — AWS publishes no preparation time for this exam. A starting point for your calendar, not a target.

Common pitfalls

Choosing the most complex multi-service solution when a simpler, AWS-managed option meets every stated requirement is a common trap, and so is picking a technically correct but needlessly expensive architecture when the question explicitly asks for cost optimization. Storage-service selection (S3 versus EBS versus EFS versus FSx, based on access pattern and performance need) trips up candidates who haven't built with more than one of them, and conflating high availability with data durability leads to the wrong replication or backup strategy on questions that test the difference deliberately.

Watch list: SAA-C03

  1. 01Over-Engineering

    Choosing the most complex multi-service solution when a simpler, more cost-effective AWS-managed option meets all the stated requirements.

  2. 02Ignoring Cost

    Selecting technically correct but unnecessarily expensive architectures when the question explicitly asks for cost optimization.

  3. 03Storage Selection

    Confusing when to use S3, EBS, EFS, and FSx based on access patterns, performance requirements, and cost constraints.

  4. 04Availability vs Durability

    Conflating high availability with data durability and selecting the wrong replication or backup strategy as a result.

  5. 05VPC Misconfigs

    Misunderstanding subnet routing, NAT gateways, security groups, and NACLs leads to wrong answers on networking architecture questions.

Pass-IT trains you on exactly these weak spots — adaptive & spaced →

Frequently asked questions

How long is the AWS Certified Solutions Architect - Associate exam?

The SAA-C03 exam has 65 questions and a 130-minute time limit.

What is the passing score for AWS Certified Solutions Architect - Associate?

You need 720 / 1000 to pass the SAA-C03 exam.

What are common mistakes on the AWS Certified Solutions Architect - Associate exam?

Common pitfalls include: Over-Engineering, Ignoring Cost, Storage Selection, Availability vs Durability, VPC Misconfigs. Focus study time on these areas to avoid losing points.

How do you pass SAA-C03?

The exam is scenario-based, so recognising service names is not enough: every question hands you requirements and asks which architecture meets them. Design secure architectures is the largest domain at 30%, and the catalog budget is around 50 hours. AWS does not publish a pass rate for any of its exams, so any figure you find online is somebody guessing.

How is SAA-C03 weighted?

Design secure architectures is the heaviest domain at 30%, then resilient architectures at 26%, high-performing architectures at 24% and cost-optimized architectures at 20%. The weighting is deliberately flat. Security still edges the others, which is why identity and encryption turn up inside scenarios that look like storage or networking problems.

Does SAA-C03 expire?

Yes, three years after you pass. You renew by retaking the current version before the expiry date, or by earning a higher-level AWS certification such as SAP-C02, which renews it for you.

What comes after SAA-C03?

SAP-C02 is the direct step up for architects, and passing it renews SAA-C03. DOP-C02 fits better if you are moving towards pipelines and operations, and SCS-C03 if security is becoming the whole job. All three are open to book without SAA-C03 first.

Do you need CLF-C02 before SAA-C03?

No. AWS sets no prerequisite, so SAA-C03 can be your first exam. Cloud Practitioner is worth the 25-hour detour if AWS vocabulary is still new; if you already run workloads it adds a sitting and little else.

Pass-IT is an independent study tool, not affiliated with or endorsed by AWS; AWS and exam names are trademarks of their respective owners.

One certification. One payment.

Full SAA-C03 access

Get the full question pool for this certification. Alex explains every answer, and your readiness score shows what to work on next.

Buy SAA-C03 access for $29.99One payment. Lifetime access to this certification.
Take the free readiness check20 questions. No card. See what to study before you buy.

Reach 80% readiness and pass — or your money back.

How the score works →