AWS Certified Solutions Architect Associate 2018 AWS Certified Solutions Architect Associate 2018 (SAA001) Free Practice Test — 30 Questions
This practice bank focuses on core skills required for the AWS Solutions Architect Associate exam: designing resilient, scalable, and secure architectures. It tests your ability to choose the right combination of AWS services to meet business and technical requirements, such as high availability, disaster recovery (RPO/RTO), performance, cost optimization, and security (encryption, data residency). Through scenarios about e-commerce and financial services, you will practice analyzing trade-offs between services like RDS Multi-AZ, Aurora Global Database, ElastiCache, CloudFront, Direct Connect, and scaling mechanisms. Mastering these decisions is key to exam success.
What this SAA001 practice set measures
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
High Availability and Disaster Recovery
This practice bank covers architectural patterns for ensuring application uptime and data durability. Questions frequently involve choosing between Multi-AZ deployments, cross-region replication, and backup strategies to meet specific RPO and RTO targets. For relational databases, RDS Multi-AZ provides synchronous replication for zero data loss during AZ failures, while Aurora Global Database offers low-latency global reads and fast failover. For storage, S3 Cross-Region Replication and EBS snapshots are considered. Elastic Load Balancers and Auto Scaling groups distribute traffic across AZs.
- Multi-AZ vs. read replicas: Multi-AZ for failover, read replicas for read scaling and disaster recovery.
- Aurora Global Database enables cross-region DR with sub-5-minute RPO and fast promotion.
- S3 CRR asynchronously copies objects to another region for data durability.
- Application Load Balancer with Auto Scaling across AZs handles traffic distribution and failure.
Scalability and Performance Optimization
This practice bank emphasizes designing systems that automatically adjust capacity to meet demand. Key services include Auto Scaling groups for EC2, Application Load Balancers for traffic distribution, and ElastiCache for caching session state or database queries. For content delivery, CloudFront reduces latency by caching static and dynamic content at edge locations. Amazon RDS read replicas offload read traffic from the primary database. When scaling databases, consider DynamoDB for NoSQL workloads or Aurora for relational.
- Stateless web tier allows horizontal scaling – use ElastiCache or DynamoDB for session state.
- CloudFront accelerates static and dynamic content globally.
- Read replicas for read-heavy workloads; Multi-AZ for writes.
- Auto Scaling policies based on CPU, memory, or request count.
Security and Compliance
Security is central to SAA-C01. Questions address data encryption at rest and in transit, IAM policy evaluation (explicit deny overrides allow), and data residency requirements. Server-side encryption with KMS provides centralized key management for S3, EBS, and RDS. IAM roles and policies enforce least privilege. For regulated data, VPC isolation and ensuring resources stay within a region are critical. AWS Config and CloudTrail provide auditing. The practice bank also touches on securing web applications with WAF.
- IAM policy evaluation: explicit deny always overrides allow.
- S3 server-side encryption options: SSE-S3, SSE-KMS, SSE-C.
- Data residency: deploy entire stack within a single region, use VPC endpoints.
- Encryption in transit via TLS/SSL, enforced by ALB security policies.
Migration and Modernization
Many questions involve migrating monolithic applications to AWS. Strategies include lift-and-shift (EC2 instances) or refactoring into microservices using ECS or EKS. The practice bank highlights the need for network connectivity (Direct Connect for hybrid), database migration (AWS DMS with ongoing replication), and breaking monoliths with anti-corruption layers. Cost optimization and leveraging managed services like RDS and DynamoDB are key. The bank also covers scaling challenges during migration and ensuring minimal downtime.
- Lift-and-shift: EC2 behind ALB with Auto Scaling for quick migration.
- Microservices with ECS/EKS increase agility but require re-architecture.
- AWS DMS enables near-zero-downtime database migration with ongoing replication.
- Direct Connect provides stable, low-latency connection for hybrid workloads.
- Anti-corruption layer pattern isolates new microservices from legacy monolith.
Practice AWS Certified Solutions Architect Associate 2018 AWS Certified Solutions Architect Associate 2018 (SAA001) with real flashcards
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Static practice bank
Start the 30-question diagnostic
The complete question bank is embedded in this pre-rendered page. There is no database request or second content download when you begin.
A financial services firm is migrating its customer-facing web portal to AWS. The application is stateful, requiring session persistence, and processes sensitive personally identifiable information (PII). The firm must ensure high availability across multiple Availability Zones, resilience against single points of failure, and a robust disaster recovery strategy that allows for a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 1 hour in a secondary region. Additionally, the application must comply with stringent data residency regulations, meaning all customer data must reside within a specific geographic region.
Which combination of AWS services best addresses these requirements?
Study workflow
Turn one SAA001 attempt into a study plan
- 1
Identify the Core Requirement
Each question presents a business need (e.g., RPO < 15 min, region-specific data, cost control). Before looking at options, state the key requirement in your own words. This will guide your service selection and eliminate irrelevant choices.
- 2
Map Requirements to AWS Service Features
For each core requirement, recall which AWS service attributes directly address it. For high availability, think Multi-AZ. For low latency, think CloudFront or read replicas. For security, think encryption and IAM. This mapping is fundamental to the exam.
- 3
Evaluate Trade-offs Between Options
Many questions offer multiple viable approaches. Compare them based on cost, complexity, and performance. For example, Aurora is more expensive but offers better performance and DR features than standard RDS. Use elimination when an option clearly violates a key requirement.
- 4
Focus on the Database and Storage Layer
Database decisions are frequent. Understand Multi-AZ vs. read replicas vs. Aurora Global Database. Know when to use RDS, DynamoDB, or ElastiCache. Scenarios often involve session state, caching, and disaster recovery. Practice distinguishing synchronous vs. asynchronous replication.
- 5
Verify Against Best Practices
After selecting, check if your architecture follows AWS Well-Architected pillars. Is it fault-tolerant? Can it scale? Is data encrypted? Does it minimize manual intervention? This final verification catches common mistakes, like using sticky sessions when stateless is better.
FAQ
Questions about this SAA001 practice page
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
What is the difference between Multi-AZ and read replicas for Amazon RDS?+
Multi-AZ provides synchronous replication to a standby in a different AZ for failover, ensuring zero data loss but no read scaling. Read replicas are asynchronous copies used for read traffic and can be promoted to primary in another region for disaster recovery.
When should I use ElastiCache for Redis vs. Memcached?+
Redis supports persistence, replication, and complex data structures, making it ideal for session state, caching, and leaderboards. Memcached is simpler and scales linearly for caching objects, but lacks persistence. For high availability, use Redis Cluster.
How does IAM evaluate permissions when multiple policies are attached?+
IAM uses a default deny, then evaluates all policies. An explicit Allow in any policy allows the action unless there is an explicit Deny statement in any policy. The Deny always overrides Allow, and the result is the effective permission.
What is the purpose of an anti-corruption layer in microservices migration?+
It acts as a facade between new microservices and the legacy monolith, translating data formats and protocols. This prevents the new system from being directly coupled to the old database or APIs, allowing gradual migration without breaking existing functionality.
Can I use CloudFront to improve performance of dynamic content?+
Yes. CloudFront can cache dynamic content at the edge, and it also establishes persistent connections to the origin, reducing latency. It supports dynamic content via origin pull, and you can customize caching based on headers, cookies, or query strings.
Build the next review session
Browse another free bank or use the study strategy guide to turn your misses into spaced review.