20+ practice questions focused on Design Resilient Architectures — one of the most tested topics on the AWS Certified Solutions Architect - Associate exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Design Resilient Architectures PracticeAn enterprise application runs on Amazon EC2 instances managed by an Auto Scaling group behind an Application Load Balancer. The application experiences unpredictable traffic spikes, and instances occasionally fail health checks due to heavy load during startup. How should the Solutions Architect configure the Auto Scaling group to ensure high availability and prevent premature termination of booting instances?
Explanation: The correct solution to prevent premature termination of booting instances is to configure the Health Check Grace Period. Option B is incorrect because the termination policy does not affect how Auto Scaling handles instances during their initial startup phase. A correct option would focus solely on the grace period.
Refer to the exhibit. A Solutions Architect applied an Amazon S3 bucket policy to restrict data access exclusively to a specific VPC endpoint. However, after applying the policy, legitimate applications running inside the authorized VPC endpoint are completely blocked from accessing the bucket. What is the cause of this failure?
Explanation: The issue occurs because the policy uses a 'Deny' effect with 'StringNotEquals' on 'aws:SourceVpce'. This logic denies all requests that do not originate from the specified VPC endpoint. Because S3 bucket policies are evaluated for every request, including those from AWS services or internal management tasks that do not originate from the VPC endpoint, the 'Deny' statement triggers. The correct approach is to use an 'Allow' statement with a 'Condition' block, or a 'Deny' statement with a 'StringNotEquals' condition that also includes a check for the specific IAM roles/users or service principals that need access.
A developer is building a serverless application with unpredictable, intermittent traffic patterns. The database must scale capacity automatically to handle bursts and shut down during periods of inactivity to save costs. Which database service is most appropriate?
Explanation: Amazon Aurora Serverless is designed for intermittent, unpredictable workloads: it automatically scales compute capacity up and down based on demand and can pause during inactivity, billing only for capacity consumed. This matches the requirement to handle bursts and shut down during idle periods to save costs. DynamoDB with provisioned capacity requires manual capacity planning and does not pause, while RDS Provisioned IOPS and Redshift Spectrum are not serverless auto-scaling databases for transactional workloads.
A solutions architect is designing a VPC for a highly resilient application across three Availability Zones. The application needs outbound internet access for updates but must not be reachable from the internet. Which TWO components are required?
Explanation: Option B is correct because a NAT Gateway provides outbound-only internet access for instances in private subnets, and deploying one in each of the three Availability Zones ensures the high resilience requirement is met (a NAT Gateway is AZ-scoped, so one per AZ avoids a cross-AZ single point of failure). Option D is correct because private subnet route tables must contain a route (e.g., 0.0.0.0/0) targeting the NAT Gateway in the same AZ for traffic to actually reach the internet; without this route, the NAT Gateway is unreachable. Option A is not required because an Internet Gateway is only needed for public subnets and would make resources potentially reachable from the internet, which the scenario forbids. Option C is incorrect because an Egress-Only Internet Gateway is used for IPv6 outbound traffic, not the typical IPv4 outbound scenario described. Option E is incorrect because a Customer Gateway is used for Site-to-Site VPN connections to on-premises networks, not for providing internet access.
Refer to the exhibit. A solutions architect is reviewing the bucket policy for a sensitive data repository. What is the effect of this policy?
Explanation: The bucket policy likely includes a condition that denies requests where 'aws:SecureTransport' is false, which means any request not using HTTPS (i.e., HTTP) is explicitly denied. This is a common security measure to enforce encryption in transit.
+15 more Design Resilient Architectures questions available
Practice all Design Resilient Architectures questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Design Resilient Architectures. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Design Resilient Architectures questions on the SAA-C03 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Design Resilient Architectures is tested as part of the AWS Certified Solutions Architect - Associate blueprint. Practicing with targeted Design Resilient Architectures questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free SAA-C03 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Design Resilient Architectures is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Design Resilient Architectures practice session with instant scoring and detailed explanations.
Start Design Resilient Architectures Practice →