SAA-C03 Design Cost-Optimized Architectures — Timed 30 Questions

Question 1

You store application logs in an S3 bucket. After 30 days, the logs are rarely accessed, but you must retain them for 1 year for compliance. Which S3 feature is the best way to reduce storage cost while meeting the retention requirement?

Accepted Answer

Create an S3 lifecycle rule to transition older objects to a colder storage class after 30 days, then expire after 1 year. Option A is correct because an S3 Lifecycle rule can automatically transition objects from S3 Standard to a colder storage class (e.g., S3 Glacier Instant Retrieval or S3 Glacier Deep Archive) after 30 days, reducing storage costs for rarely accessed logs. After 1 year, the rule can expire the objects, which permanently deletes them, meeting the compliance retention requirement without manual intervention.

Answer

Keep all logs in S3 Standard and rely on lower request rates to reduce cost

Answer

Copy logs to EBS snapshots each week and delete the original files

Answer

Use S3 replication to a second bucket in another region to reduce costs

Question 2

CloudWatch metrics show your EC2 instances have average CPU utilization around 10% with stable performance over several weeks. The application does not require additional headroom right now. What is the most effective cost-optimization action?

Accepted Answer

Right-size the instances to a smaller size that matches the observed utilization. Right-sizing EC2 instances to match observed utilization is the most effective cost-optimization action because the current instances are over-provisioned (average CPU at 10%). By selecting a smaller instance type that aligns with the actual workload, you reduce hourly costs without impacting performance, as the application has stable behavior and no need for headroom.

Answer

Increase the Auto Scaling desired capacity to add more instances

Answer

Switch to Spot Instances immediately even though interruptions would impact users

Answer

Disable detailed monitoring to reduce CPU usage from the monitoring agent

Question 3

A marketing site serves versioned JavaScript and CSS files from Amazon S3 through CloudFront. The origin bill is rising because CloudFront keeps fetching the same files too often, and the application never changes a file at the same URL once it is published. Which two changes should you make? Select two.

Accepted Answer

Set long-lived Cache-Control headers, such as a high max-age and immutable policy, on the versioned assets.. Option A is correct because setting long-lived Cache-Control headers (e.g., `max-age=31536000` and `immutable`) on versioned assets tells CloudFront and browsers to cache the files aggressively. Since the application never changes a file at the same URL, this eliminates redundant origin fetches, directly reducing the origin bill.

Answer

Move the static assets to an EC2 web server behind an Application Load Balancer.

Answer

Disable CloudFront caching so every request always reaches the origin.

Answer

Add more viewer-facing headers to the cache key so each browser variation gets a unique cached object.

Question 4

An application serves static images through Amazon CloudFront. The team observes higher-than-expected origin fetches, which increases origin bandwidth costs. Which change most directly improves CloudFront cache reuse to reduce origin requests for the static content?

Accepted Answer

Set appropriate Cache-Control headers (or origin cache settings) so CloudFront caches responses longer. Option A is correct because setting appropriate Cache-Control headers (e.g., max-age or s-maxage) or configuring origin cache settings tells CloudFront how long to keep objects in its edge cache before revalidating with the origin. By extending the cache duration, CloudFront serves more requests from its cache, reducing the number of origin fetches and lowering bandwidth costs.

Answer

Disable caching for the distribution so every request goes back to the origin

Answer

Configure CloudFront to forward all request headers and query strings to the origin

Answer

Move the S3 bucket to a different AWS Region, without changing CloudFront caching behavior

Question 5

Your team runs a batch processing workload on EC2 that can tolerate interruptions. If an instance is terminated, the job can restart from checkpoints. To reduce compute costs, what is the most cost-optimized approach?

Accepted Answer

Use EC2 Spot Instances for the batch workers. Spot Instances are ideal for fault-tolerant, interruption-tolerant batch workloads because they offer significant cost savings (up to 90% compared to On-Demand) while allowing the job to resume from checkpoints if terminated. This aligns perfectly with the requirement to reduce compute costs without compromising the ability to restart interrupted jobs.

Answer

Use Dedicated Hosts to ensure capacity for the cheapest instance

Answer

Use On-Demand instances and schedule extra runs to offset interruptions

Answer

Use Reserved Instances only, because they eliminate instance termination events

Question 6

An internal rendering job runs on EC2 workers in an Auto Scaling group. Each job writes checkpoints every few minutes to S3 and can resume from the latest checkpoint after an interruption. The queue depth varies sharply, and the team wants the lowest possible compute cost. Which two changes should they make? Select two.

Accepted Answer

Run the worker fleet on EC2 Spot Instances.. Option A is correct because Spot Instances can be interrupted with a two-minute warning, and since the rendering job writes checkpoints to S3 every few minutes and can resume from the latest checkpoint, it is fault-tolerant to interruptions. This allows the team to leverage the significantly lower cost of Spot Instances (up to 90% off On-Demand) while maintaining job completion, achieving the lowest compute cost for variable queue depths.

Answer

Purchase Dedicated Hosts so the fleet keeps physical servers reserved for the workload.

Answer

Run the entire fleet on On-Demand Instances to avoid any interruption risk.

Answer

Move the workers to AWS Outposts to keep compute close to the data.

Question 7

A company has a steady, predictable workload that must run continuously (24/7) in a single AWS Region. The team wants the lowest cost option available for this steady usage, but also expects they may choose different EC2 instance families in the future (without re-buying compute discounts). Which AWS purchase option best meets these goals?

Accepted Answer

Compute Savings Plans, committed for a 1- to 3-year term in the Region. Compute Savings Plans offer the lowest cost for steady, predictable workloads while providing instance family flexibility within a Region. Unlike Reserved Instances, they automatically apply discounts to any EC2 instance family (and even Fargate/Lambda) in the chosen Region, so the company can switch instance families in the future without losing the discount. A 1- or 3-year commitment yields significant savings (up to 66%) compared to On-Demand, making it the optimal choice for this scenario.

Answer

On-Demand Instances only, because they automatically adjust to future needs

Answer

Standard Reserved Instances tied to a single instance type and Availability Zone

Answer

EC2 Spot Instances, because they are always cheaper than savings programs

Question 8

Match each data-retention scenario to the most cost-effective Amazon S3 storage class. Assume the retrieval pattern and access-latency requirement are the most important constraints.

Question 9

A web service runs continuously on AWS 24/7. The team expects steady compute usage for the next 12–24 months, but may change instance families/sizes as performance tuning continues. Which purchase option best reduces cost while keeping flexibility to change instance types?

Accepted Answer

Use Compute Savings Plans for the expected steady usage. Compute Savings Plans offer the lowest prices (up to 66% off On-Demand) in exchange for a commitment to a consistent amount of compute usage (measured in $/hour) for a 1- or 3-year term. Unlike Reserved Instances, they automatically apply to any EC2 instance family, size, OS, or region, giving you the flexibility to change instance types as performance tuning evolves, while still reducing costs for steady-state workloads.

Answer

Buy EC2 On-Demand instances and rely on future Spot capacity for discounts

Answer

Buy Reserved Instances with a fixed instance type and region

Answer

Buy Spot Instances and stop scaling to avoid interruption risk

Question 10

Match each workload to the AWS pricing option that most directly minimizes cost while still meeting the stated flexibility requirements. Use each option once.

Question 11

A team stores application logs in Amazon S3. They need access to the logs only occasionally for troubleshooting (infrequent access), and they want to reduce storage cost automatically over time without manually moving objects. What should they implement?

Accepted Answer

An S3 lifecycle policy that transitions objects to a lower-cost storage class after a set number of days. Option A is correct because an S3 lifecycle policy can automatically transition objects from S3 Standard to lower-cost storage classes (e.g., S3 Standard-IA, S3 One Zone-IA, or S3 Glacier Instant Retrieval) after a specified number of days. This meets the requirement of reducing storage costs over time for infrequently accessed logs without manual intervention, as the policy automates the movement based on object age.

Answer

An S3 lifecycle policy that deletes objects after 1 day to eliminate storage costs

Answer

An S3 lifecycle policy that keeps all objects in S3 Standard and only applies compression at read time

Answer

A policy that changes bucket encryption from SSE-S3 to SSE-KMS to reduce storage cost

Question 12

Your global users access static images stored in S3. Origin bandwidth costs are higher than expected because CloudFront is not caching effectively. What change most directly reduces origin fetches (and typically lowers data transfer costs) without changing application logic?

Accepted Answer

Configure CloudFront caching by setting appropriate cache-control headers and/or CloudFront cache policy/TTL values for the static objects. The high origin bandwidth costs are caused by CloudFront not caching effectively, meaning too many requests reach the S3 origin. By configuring appropriate Cache-Control headers or a CloudFront cache policy with optimal TTL values, you ensure that CloudFront caches the static images at edge locations for longer periods. This directly reduces the number of origin fetches, lowering data transfer costs without any changes to the application logic.

Answer

Disable CloudFront caching so every request goes back to S3 for the latest image

Answer

Route users directly to the S3 website endpoint to bypass CloudFront

Answer

Turn on a NAT Gateway for the CloudFront origin to reduce bandwidth charges

Question 13

Match each workload to the most cost-effective compute model or service choice. Focus on how often the workload runs, whether it is interruption-tolerant, and how much administration the team wants to avoid.

Question 14

A service in private subnets downloads product images from Amazon S3 and stores job state in DynamoDB. A NAT Gateway is currently the only route to AWS services, and the monthly bill is dominated by NAT data processing charges. Which two changes will most directly reduce that cost? Select two.

Accepted Answer

Create a gateway VPC endpoint for Amazon S3.. A is correct because a gateway VPC endpoint for Amazon S3 allows instances in private subnets to access S3 directly over the AWS network without traversing the internet or a NAT Gateway. This eliminates NAT data processing charges for S3 traffic, which is the dominant cost driver in this scenario.

Answer

Add an internet gateway and move the instances into public subnets.

Answer

Replace the NAT Gateway with a Site-to-Site VPN connection.

Answer

Create an interface endpoint for S3 instead of a gateway endpoint.

Question 15

Match each private-networking or content-delivery scenario to the AWS feature that most directly reduces cost while meeting the connectivity requirement.

Question 16

You need to run batch jobs on EC2. The jobs can tolerate interruptions: if an instance is terminated, the job can restart from checkpoints. To reduce compute cost as much as possible, what is the best choice?

Accepted Answer

EC2 Spot Instances with checkpoint-based interruption handling. Spot Instances offer significant cost savings (up to 90% compared to On-Demand) but can be reclaimed by AWS with a two-minute warning. Since the batch jobs can tolerate interruptions and restart from checkpoints, Spot Instances are the most cost-effective choice. This aligns with the requirement to reduce compute cost as much as possible while handling interruptions gracefully.

Answer

EC2 On-Demand Instances to avoid interruptions

Answer

Savings Plans to guarantee capacity for the entire year

Answer

Reserved Instances with no interruption handling

Question 17

A containerized service runs in private subnets and retrieves secrets from AWS Secrets Manager and configuration parameters from AWS Systems Manager Parameter Store on startup. A NAT Gateway is currently used only for these AWS API calls, and the security team wants to eliminate that recurring charge. Which two endpoints should be added? Select two.

Accepted Answer

Create an interface VPC endpoint for AWS Secrets Manager.. Option A is correct because AWS Secrets Manager is accessed via API calls over HTTPS, and an interface VPC endpoint (powered by AWS PrivateLink) allows private connectivity to the service without traversing the internet or a NAT Gateway. This eliminates the need for the NAT Gateway for Secrets Manager traffic, reducing costs and improving security by keeping traffic within the AWS network.

Answer

Create a gateway VPC endpoint for Amazon S3 instead.

Answer

Add an Internet Gateway and send the traffic through public subnets.

Answer

Replace the NAT Gateway with a NAT instance.

Question 18

A line-of-business application runs on EC2 instances 24/7 with predictable usage for the next year. The application will stay in the same Region, and the team does not want to manage capacity interruptions. Which two purchase options can reduce cost compared with pure On-Demand pricing? Select two.

Accepted Answer

Buy Compute Savings Plans for the expected steady usage.. Compute Savings Plans (A) offer a flexible discount (up to 66%) in exchange for a 1- or 3-year commitment to a consistent amount of compute usage (measured in $/hour), automatically applying to any EC2 instance family, region, or even AWS Fargate/Lambda. This reduces cost compared to On-Demand while avoiding capacity interruptions, as the commitment covers the predictable steady-state usage. Standard Reserved Instances (B) provide a similar discount (up to 72%) for a specific instance family in a specific region, also with a 1- or 3-year term, and guarantee capacity for the specified AZ if you choose a zonal reservation, ensuring no interruptions.

Answer

Move the fleet to Spot Instances.

Answer

Use Dedicated Hosts to reserve physical servers for the application.

Answer

Stay entirely on On-Demand Instances because they are already the cheapest option.

Question 19

A compliance archive writes one log file per day to Amazon S3. The logs are almost never accessed after day 30, but if they are needed they must still be retrievable in milliseconds. They must be deleted automatically after one year. Which two lifecycle settings should you apply? Select two.

Accepted Answer

Transition the objects to S3 Glacier Instant Retrieval after 30 days.. Option A is correct because S3 Glacier Instant Retrieval provides millisecond retrieval times for archived data, meeting the requirement that logs must be retrievable in milliseconds after 30 days. This storage class is designed for long-lived, rarely accessed data that still needs immediate access, making it ideal for compliance archives that are almost never accessed but must be available instantly when needed.

Answer

Transition the objects to S3 Standard-IA after 30 days.

Answer

Keep the logs in S3 Standard indefinitely and delete them manually when needed.

Answer

Replicate the logs to another Region for cheaper archival storage.

Question 20

A workload runs in private subnets. It must access AWS services such as Amazon S3, but the company wants to avoid using a NAT Gateway to reduce outbound networking costs. What is the best solution?

Accepted Answer

Create VPC endpoints for the required AWS services and route traffic to them. VPC endpoints (Gateway Endpoints for S3 and DynamoDB, or Interface Endpoints for other services) allow instances in private subnets to access AWS services privately without traversing the internet or a NAT Gateway. This eliminates NAT Gateway data processing and hourly charges, directly reducing outbound networking costs while keeping traffic within the AWS network.

Answer

Attach Elastic IP addresses to instances in private subnets

Answer

Install a NAT Gateway in every subnet to minimize routing hops

Answer

Open outbound internet access with a security group rule to reach service endpoints directly