Open the app
Study guidesHelp centerOpen the app

Free AWS Solutions Architect Associate practice questions

10 free sample questions for the AWS Solutions Architect Associate exam, each with an explanation that starts with why a wrong answer is wrong. No account needed. Try the first one now.

Start the free questionsRead the study guide
Solutions Architect sample10 free questions
After an acquisition, a company wants a continuously updated list of its S3 buckets, KMS keys, IAM roles, and other resources whose resource policies grant access to principals outside its AWS organization. Which service provides this with the LEAST effort?

Why that one is wrong. Macie discovers sensitive data inside S3 objects. It does not analyze resource policies for access from outside the organization.

Why that one is wrong. CloudTrail shows what external principals have already done, not every resource that currently allows them access.

Why that one is wrong. Inspector finds software vulnerabilities and network reachability issues, not resource-policy sharing.

Why B is right. An external access analyzer uses automated reasoning on resource policies and reports resources shared with principals outside the zone of trust.

IAM Access Analyzer identifies resources whose policies grant access outside your account or organization.

What the exam covers

  • Design Secure Architectures (30%)
  • Design Resilient Architectures (26%)
  • Design High-Performing Architectures (24%)
  • Design Cost-Optimized Architectures (20%)

A few more sample questions

Sample question 1. A company deploys a new version of its application as a complete new environment (green) alongside the current one (blue), each behind its own load balancer. It wants to shift 10% of users to green first, increase gradually, and switch back quickly if problems appear. Which approach meets these requirements?

  1. Update the blue instances in place, one at a time.
  2. Use Route 53 failover records with green as secondary.
  3. Use Route 53 weighted records and adjust the weights.
  4. Replace the DNS record’s value with the green load balancer in one change.

Sample question 2. A company runs a large Apache Cassandra cluster of 60 nodes in one Region. It wants to place groups of nodes on separate sets of racks so that a rack-level failure affects only one replica group, and it wants the application to see which rack group each node is in. Which EC2 placement strategy fits BEST?

  1. A cluster placement group
  2. A partition placement group
  3. A spread placement group
  4. No placement group, relying on default placement

Sample question 3. A legacy application must keep 16 TiB of historical files on a block volume attached to its EC2 instance. The files are read sequentially a few times per month, and speed is not important. Which EBS volume type provides the LOWEST cost?

  1. General Purpose SSD (gp3)
  2. Throughput Optimized HDD (st1)
  3. Provisioned IOPS SSD (io2)
  4. Cold HDD (sc1)

Answer them with explanations

Get the Solutions Architect Cert Pass

$19.99 once. No subscription.

  • 395 practice questions with explained answers, 5 full timed practice tests, 395 flashcards and 3 study games.
  • Any 2 for $34.99. Any 3 for $49.99.
  • 25% off with code LAUNCH25: first 250 buyers, ends December 31, 2026.
  • Refund within 24 hours of a website purchase. See the Terms.
Get the Solutions Architect Cert Pass

How to trust this practice

  • Every answer explains why, and cites its source.
  • Practice tests are built around the vendor’s published exam domains.
  • These are practice questions, not real exam questions.

See the free sample questions for every certification

Take it with you

  • Download on the App Store
  • Get it on Google Play