AWS Certified Solutions Architect Associate AWS Certified Solutions Architect Associate (SAA001) Free Practice Test — 30 Questions
This practice set exercises your ability to design scalable, highly available, and cost-effective architectures on AWS. You will apply decisions about compute services (EC2, ECS, EKS, Lambda), storage (S3, EFS, RDS, DynamoDB, ElastiCache), networking (ALB, Route 53, VPC endpoints), and disaster recovery (multi-AZ, multi-region, RDS read replicas, S3 CRR). It also tests your understanding of microservices decoupling (SQS, Step Functions), compliance and data residency (GDPR, region restriction), and secure secrets management (Secrets Manager). The scenarios require balancing migration complexity, operational overhead, and business continuity to meet evolving traffic and regulatory demands.
What this SAA001 practice set measures
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
Architecting for Scalability and High Availability
This practice bank repeatedly challenges you to design systems that auto-scale to handle unpredictable traffic spikes while maintaining availability. Key patterns include using Auto Scaling groups across multiple Availability Zones behind an Application Load Balancer, and decoupling compute from state via ElastiCache (Redis) for session persistence. For databases, Multi-AZ RDS or Aurora Global Database provide failover and cross-region DR. The trade-offs between container orchestration (ECS/EKS with Fargate) and serverless (Lambda) are examined to minimize operational overhead while meeting scaling requirements.
- Use Auto Scaling groups and ALB to distribute traffic across AZs and scale dynamically.
- Offload session state to ElastiCache (Redis) to survive instance failures and scaling events.
- Deploy databases with Multi-AZ (RDS) or Global Database (Aurora) for automatic failover and cross-region resilience.
- Choose container services (ECS/EKS) or Lambda based on need for granular scaling vs. operational simplicity.
Migrating Monoliths to Microservices
The practice set emphasizes breaking monolithic applications into independently deployable microservices to improve agility and fault isolation. You must evaluate options like ECS with Fargate for containerized microservices, Lambda for serverless functions, and Step Functions for orchestrating multi-step workflows. Decoupling services with SQS or Step Functions addresses synchronous communication bottlenecks and cascading failures. CI/CD pipelines (CodePipeline, CodeBuild, CodeDeploy) are recommended to enable rapid, safe deployments. The scenarios stress that microservices require careful management of inter-service dependencies and data consistency.
- Refactor monoliths into microservices for independent scaling, deployment, and fault isolation.
- Use ECS/EKS with Fargate or Lambda for compute; Step Functions for workflow orchestration.
- Decouple services with SQS (async messaging) or Step Functions to reduce latency and brittleness.
- Implement CI/CD pipelines (CodePipeline) to automate build, test, and deploy cycles.
Data Storage, Migration, and Compliance
This practice bank covers selecting the right storage and database services for performance, durability, and regulatory compliance. For migration, RDS Multi-AZ or Aurora Global Database address data corruption and DR needs (RPO < 15 min, RTO < 1 hr). S3 Cross-Region Replication ensures data resiliency across regions. Compliance with GDPR requires storing and processing data solely within EU Regions, enforced via S3 bucket policies, VPC endpoints, and service configuration. Secrets Manager provides secure, auditable storage of database credentials with automatic rotation.
- Migrate databases to RDS with Multi-AZ for high availability and automated backups; use Aurora Global Database for cross-region DR.
- Enable S3 Cross-Region Replication and versioning for disaster recovery of object data.
- For EU data residency, deploy all components within an EU Region; restrict access via S3 bucket policies and VPC endpoints.
- Store database credentials in Secrets Manager with automatic rotation and immutable audit logs.
Disaster Recovery, Business Continuity, and Operational Excellence
The practice set tests multi-region DR strategies to meet strict RPO/RTO targets. Solutions include Route 53 health checks with failover routing, RDS read replicas in a secondary region for promotion, and S3 CRR. For stateful applications, ElastiCache or EFS provides shared state across instances. Operational excellence is addressed by centralized logging and monitoring (CloudWatch, CloudTrail) to diagnose performance issues. The overall pattern is to design loosely coupled, stateless components where possible, and use managed services to reduce operational burden.
- Configure Route 53 failover routing and health checks to divert traffic to a secondary region during outages.
- Deploy RDS read replicas in a DR region, with automated promotion for minimal RTO.
- Use ElastiCache or EFS to maintain session state and shared files across ephemeral compute instances.
- Implement centralized logging and monitoring to enable rapid root cause analysis.
Practice AWS Certified Solutions Architect Associate AWS Certified Solutions Architect Associate (SAA001) with real flashcards
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Static practice bank
Start the 30-question diagnostic
The complete question bank is embedded in this pre-rendered page. There is no database request or second content download when you begin.
A rapidly expanding e-commerce platform is experiencing unpredictable traffic surges, leading to intermittent service degradation and increased operational costs. The architecture currently relies on a monolithic application deployed on a fixed set of EC2 instances behind a single Availability Zone load balancer. The company needs to re-architect its AWS environment to support a projected 300% growth in user traffic over the next year, ensure business continuity through automated failover, and optimize cloud spend without compromising performance or data integrity. Which of the following architectural approaches best addresses these requirements while promoting long-term adaptability and operational efficiency?
Study workflow
Turn one SAA001 attempt into a study plan
- 1
Identify Scalability and Availability Constraints
Analyze the scenario for peak traffic patterns, single points of failure, and statefulness. Determine if the current architecture uses a single instance or AZ. Plan to distribute compute across multiple AZs with Auto Scaling and a load balancer. For databases, consider Multi-AZ or cross-region replicas to meet RPO/RTO.
- 2
Decide on Compute and Orchestration Strategy
Choose between EC2 Auto Scaling, ECS/EKS with Fargate, or Lambda based on operational overhead and granularity needs. For monolithic migrations, containerization (ECS) offers a balance of minimal refactoring and dynamic scaling. For new microservices, serverless (Lambda) reduces management. Use Step Functions for complex workflows and SQS for async decoupling.
- 3
Select Storage and Database Services for Performance and Durability
Match storage to workload: S3 for objects, EFS for shared files, RDS/Aurora for relational data, DynamoDB for NoSQL, ElastiCache for caching and session state. For compliance, ensure all data resides in required regions. Enable replication, backups, and versioning. Use Secrets Manager for credentials.
- 4
Design a Multi-Region Disaster Recovery Plan
Set up Route 53 with health checks and failover routing to a secondary region. Deploy RDS read replicas cross-region, or Aurora Global Database. Replicate S3 data using CRR. Test failover procedures regularly. Consider pilot light or warm standby strategies to balance cost and recovery speed.
- 5
Implement Monitoring, Logging, and CI/CD
Enable CloudTrail for API auditing, CloudWatch for metrics and logs, and centralize logs in S3. Use CodePipeline, CodeCommit, CodeBuild, and CodeDeploy for automated deployments. For microservices, implement distributed tracing (X-Ray). Regularly review dashboards to detect performance degradation and compliance drifts.
FAQ
Questions about this SAA001 practice page
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
What is the key difference between Amazon RDS Multi-AZ and Read Replicas for disaster recovery?+
Multi-AZ provides synchronous replication and automatic failover within a single region, ensuring high availability but not cross-region DR. Read Replicas can be cross-region, asynchronous, and promoted to standalone instances for disaster recovery, meeting lower RPO/RTO targets.
When should I use AWS Step Functions instead of direct service-to-service calls?+
Step Functions is ideal for orchestrating multi-step business processes, managing state, error handling, and retries. It decouples services, visualizes workflows, and handles parallel executions. Use it when you need coordinated, resilient workflows across microservices.
How do I enforce EU data residency for sensitive customer data on AWS?+
Deploy all AWS resources (EC2, RDS, S3) within an EU region. Use S3 bucket policies with conditions to restrict access to VPC endpoints. Disable cross-region replication and ensure Lambda functions and Glue jobs run only in the EU region. Verify default service settings.
What is the recommended way to manage user session state in a horizontally scaled web application?+
Use Amazon ElastiCache for Redis as a centralized, in-memory data store for session data. This ensures any instance behind the load balancer can retrieve session state, preventing data loss during scaling or instance failures. Sticky sessions (ALB) are an alternative but less resilient.
How does AWS Secrets Manager improve security compared to storing credentials in application code?+
Secrets Manager encrypts secrets at rest and in transit, integrates with IAM for fine-grained access, enables automatic rotation (e.g., RDS credentials), and provides immutable audit logs via CloudTrail. This eliminates hardcoded secrets and reduces the risk of credential exposure.
Build the next review session
Browse another free bank or use the study strategy guide to turn your misses into spaced review.