SaveMyCert
Log in
5 of 5 free questions left today·for 10 a day
SAP-C03 · Domain 1

Architecture Design and Implementation Built for the Cloud practice questions

Architecture Design and Implementation Built for the Cloud is worth 25% of the SAP-C03 exam — the heaviest of the 5 domains. Designing cloud-native architectures across an organization: event-driven and serverless patterns, containers and service meshes, multi-tenancy, AI/ML and RAG integration, hybrid connectivity and DNS, multi-VPC networking, IPv6, global routing, and data, storage and database design. Official weighting 25%. 6 fully worked examples are further down this page, answers included.

Exam weight
25%
the heaviest of the 5 domains
Questions
222
across 6 topics
Free, no account
5/day
a free account allows 10 a day
Explanations
Every option
right and wrong

Build a practice session

5 free questions left today.

Domains

How many?

Mode

Ready when you are

10 fresh questions drawn across 1 of 5 domains, in Learn mode.

Review what you missed

Every question you answer incorrectly, and every question you flag while practising, is saved here automatically. Finish a session and you can come back to re-drill just those.

6 sample Architecture Design and Implementation Built for the Cloud questions, fully explained

Questions from the SAP-C03 bank mapped to domain 1, with the answer key and the reasoning behind every option. None of them repeat the examples on the main SAP-C03 practice page.

Question 1Architecture Design and Implementation Built for the Cloud

An Amazon EventBridge rule sends OrderPlaced events to an AWS Lambda function that charges the customer through a payment provider. Finance found a few customers charged twice; the CloudWatch logs show the function ran twice for the same event ID a few seconds apart. The company wants to stop duplicate charges with the least change to the architecture and without losing events when the function fails. What should a solutions architect do?

Choose one.

  • a
    Set the rule target retry policy to zero retry attempts and send the failed events to an Amazon SQS dead-letter queue instead

    EventBridge delivery is at least once even without retries, so duplicates can still arrive, and failed events now go straight to the dead-letter queue instead of being retried.

  • b
    Record each event ID in an Amazon DynamoDB table with a conditional put before charging, and skip the charge when the ID exists Correct

    A conditional put (attribute_not_exists) makes the first delivery claim the event ID; a duplicate delivery fails the condition and returns without charging. This is the idempotency-key pattern, and it leaves retries in place.

  • c
    Set the reserved concurrency of the function to one so that charges for the same order are processed one at a time

    Serialising invocations only changes timing; the second delivery of the same event still runs and charges again after the first finishes.

  • d
    Add an EventBridge archive on the event bus and replay the events that failed instead of letting the rule retry them

    An archive and replay help recover lost events but do nothing about a duplicate delivery, and replays are themselves new deliveries the consumer must tolerate.

The concept

EventBridge, SNS and SQS standard queues deliver at least once, so a consumer with side effects must be idempotent.

Why that’s the answer

Duplicate delivery is part of the EventBridge contract, so the fix belongs in the consumer. Storing the event ID with a conditional write before the side effect means only one delivery can claim the event; later deliveries see the ID and skip the charge. Disabling retries loses resilience without removing duplicates, reserved concurrency only serialises them, and an archive addresses recovery rather than duplicates.

How to reason it out
  1. Recognise the symptom: the same event ID processed twice means at-least-once delivery.
  2. Accept that delivery cannot be made exactly-once by tuning retries.
  3. Make the side effect idempotent with a key that is stable across deliveries (the event ID or order ID).
  4. Use a conditional write so the check and the claim happen atomically.

Exam tip: At-least-once delivery is fixed in the consumer: claim a stable idempotency key with a conditional write before the side effect.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

Question 2Architecture Design and Implementation Built for the Cloud

A logistics company streams telemetry from 200,000 trucks into an Amazon Kinesis data stream with 20 shards, using the truck ID as the partition key. An AWS Lambda function consumes the stream. Readings for each truck must be processed in order. The function falls behind at peak even though each invocation finishes quickly, and when one malformed record makes the function throw, the whole shard stops progressing for hours. Which actions should a solutions architect take? (Select TWO.)

Choose TWO.

  • a
    Replace the truck ID partition key with a random partition key so that records spread evenly across the 20 shards

    A random key spreads load but scatters each truck across shards, so its readings are no longer processed in order.

  • b
    Raise the parallelization factor of the event source mapping so that each shard is processed by several concurrent batches Correct

    A parallelization factor of up to 10 runs several batches per shard at once while still keeping records with the same partition key in order, so throughput rises without breaking per-truck ordering.

  • c
    Turn on batch bisection on function error, cap the retry attempts and record age, and add an on-failure destination Correct

    Bisecting isolates the bad record in a smaller batch, the retry and age caps stop it blocking the shard for hours, and the on-failure destination keeps a record of what was skipped.

  • d
    Replace the event source with an Amazon SQS standard queue and let Lambda scale the pollers with the queue depth

    SQS standard queues do not preserve order, which breaks the per-truck ordering requirement.

  • e
    Raise the batch size of the event source mapping to 10,000 and add a 300-second batching window so each function invocation processes more records

    Bigger batches raise per-invocation work and do nothing for a poison record; with no bisection the larger failing batch blocks the shard just the same.

The concept

For Kinesis event source mappings, the parallelization factor adds concurrency per shard while keeping per-partition-key order, and bisection plus retry/age limits stop a poison record from blocking a shard.

Why that’s the answer

Two separate problems need two levers. Lag with fast invocations means too little concurrency per shard: the parallelization factor processes up to 10 batches per shard concurrently, and Lambda keeps records of the same partition key in order. The stalled shard is a poison record retried until it expires: bisecting the batch narrows it down, retry and maximum-record-age limits let the shard move on, and an on-failure destination keeps the failed record details. Random keys and SQS standard both break ordering; bigger batches make failures worse.

How to reason it out
  1. Separate the throughput problem from the failure problem.
  2. For throughput with ordering, add concurrency per shard rather than changing the key.
  3. For poison records, isolate them (bisect), bound retries, and send the failure record somewhere durable.
  4. Reject any option that breaks per-key ordering.

Exam tip: Kinesis + Lambda: parallelization factor for speed with ordering, bisect + retry limits + on-failure destination for poison records.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

Question 3Architecture Design and Implementation Built for the Cloud

An ecommerce platform publishes order events consumed by six internal teams and two SaaS partners that accept events only over HTTPS. Each consumer wants a different subset based on fields inside the event, such as the order total and the shipping country. When a new consumer is onboarded, it must be able to reprocess the last seven days of events. Producers must not change when consumers are added. Which design meets these requirements with the least custom code?

Choose one.

  • a
    Publish the events to an Amazon SNS standard topic, give each consumer a subscription filter policy, and use HTTPS subscriptions for partners

    SNS filter policies and HTTPS subscriptions cover the routing, but a standard topic keeps no history, so a new consumer cannot reprocess the last seven days.

  • b
    Write to an Amazon Kinesis data stream with seven-day retention, and have each consumer read the stream and filter in custom code

    Retention allows reprocessing, but every consumer must write its own filtering and the SaaS partners cannot read a Kinesis stream, so custom forwarding code is needed.

  • c
    Publish to an Amazon EventBridge custom event bus with one rule per consumer, API destinations for partners, and an archive Correct

    Rules filter on fields in the event body, API destinations call the partners over HTTPS with managed authorization and rate limits, and an archive lets a new consumer replay a past time window.

  • d
    Have the producer send a copy to an Amazon SQS queue for each consumer and use Lambda functions to forward the partner copies

    Producers would change for every new consumer, filtering lives in the producer, and SQS keeps no history for a consumer that joins later.

The concept

EventBridge combines content-based routing, HTTPS delivery to third parties (API destinations) and archive/replay on one bus.

Why that’s the answer

Three requirements decide it: content filtering per consumer, HTTPS delivery to partners and seven-day reprocessing for late joiners. EventBridge rules filter on any event field, API destinations deliver over HTTPS, and archive and replay let a new consumer reprocess past events. SNS standard has filtering and HTTPS but no replay; Kinesis has replay but no filtering or HTTPS delivery; per-consumer SQS copies couple producers to consumers.

How to reason it out
  1. List the must-haves: field filtering, HTTPS targets, history for late joiners, producer independence.
  2. Check each service against every must-have, not just the first one.
  3. Note that only EventBridge provides filtering, HTTPS delivery and replay without custom code.

Exam tip: Content routing + SaaS HTTPS targets + replay points to EventBridge; SNS lacks replay on standard topics, Kinesis lacks routing.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

Question 4Architecture Design and Implementation Built for the Cloud

A web application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer with sticky sessions turned on. Shopping carts are kept in the memory of each instance. When the group scales in or replaces an unhealthy instance, the users on that instance lose their carts. The company wants instances to be replaceable at any time without users noticing. What should a solutions architect do?

Choose one.

  • a
    Increase the duration of the stickiness cookie on the target group so that each user’s cart stays on one instance

    A longer cookie keeps users on the same instance longer, but the cart still disappears when that instance is terminated.

  • b
    Store the cart data in an Amazon ElastiCache cluster and disable stickiness on the target group Correct

    With carts in a shared cache, any instance can serve any request, so stickiness is no longer needed and losing an instance loses no state.

  • c
    Increase the deregistration delay of the target group to one hour before an instance is removed

    Deregistration delay lets in-flight requests finish; new requests from those users still move elsewhere once the instance leaves, and their carts stay behind.

  • d
    Add an Amazon EC2 Auto Scaling lifecycle hook that delays the termination of each instance by one hour

    Delaying termination postpones the loss but does not prevent it, and unhealthy instances still lose their carts.

The concept

A stateless tier keeps session state outside the instance, in a shared store such as ElastiCache or DynamoDB.

Why that’s the answer

The root cause is state held in instance memory. Moving carts to ElastiCache makes every instance interchangeable, which is what lets Auto Scaling replace instances freely. The other options keep the state on the instance and only delay the moment it is lost.

How to reason it out
  1. Find where the state lives: in each instance’s memory.
  2. Ask whether the option moves the state or only delays losing it.
  3. Choose a shared, low-latency store for session data and remove stickiness.

Exam tip: If losing an instance loses user data, externalize the state; stickiness and longer timeouts only delay the loss.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

Question 5Architecture Design and Implementation Built for the Cloud

A document-conversion service runs as an Amazon ECS service on AWS Fargate. Clients upload files of up to 2 GB to a task, which writes them to the task’s ephemeral storage and tracks conversion progress in memory. During deployments and scale-in events, in-progress jobs are lost and clients polling for status get errors. The company wants any task to be able to continue or report on any job. Which changes should a solutions architect make? (Select TWO.)

Choose TWO.

  • a
    Raise the ephemeral storage of each task to 200 GiB so that client uploads of up to 2 GB fit on local disk

    More local disk fits larger files, but the data still disappears when the task stops, which is the problem.

  • b
    Have clients upload directly to Amazon S3 with presigned URLs and pass the object key to the service Correct

    Files in S3 survive the task, any task can read them by key, and presigned uploads keep 2 GB transfers off the task entirely.

  • c
    Attach an Amazon EBS volume to each task through the ECS service and write the uploads and job status to that volume

    An EBS volume attached by an ECS service belongs to one task and is deleted with it by default, so other tasks still cannot see the job.

  • d
    Track each job’s status in an Amazon DynamoDB table keyed by job ID and update it with conditional writes Correct

    Job state outside the task lets any task report on or resume a job; conditional writes stop two tasks from claiming the same job.

  • e
    Turn on the ECS deployment circuit breaker so that a failed deployment rolls back to the task set tracking the jobs

    The circuit breaker handles failed deployments; successful deployments and scale-in still stop tasks that hold job state.

The concept

Containers become replaceable when files go to S3 and progress goes to a shared database such as DynamoDB.

Why that’s the answer

Two kinds of state are trapped in the task: the uploaded file and the job progress. S3 holds the file independently of any task (and presigned URLs move the upload off the service), while a DynamoDB item per job holds progress that any task can read or update. Larger ephemeral storage and per-task EBS volumes still tie data to one task; the circuit breaker addresses a different failure.

How to reason it out
  1. Inventory the state the task holds: files and progress.
  2. Move each kind to a store that outlives the task and is shared by all tasks.
  3. Check that options which keep data on per-task storage do not solve replacement.

Exam tip: Files to S3, progress to DynamoDB: then any task can pick up any job and tasks can be replaced at will.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

Question 6Architecture Design and Implementation Built for the Cloud

A media company delivers clickstream events as JSON files into an Amazon S3 bucket, about 2 TB a day, and analysts query them with Amazon Athena through an AWS Glue Data Catalog table. Most queries select 5 of the 120 fields for the last few days, yet each query scans the whole dataset, and the Athena bill keeps growing. Which actions will reduce the amount of data each query scans the MOST? (Select TWO.)

Choose TWO.

  • a
    Create an Athena capacity reservation so that the analyst queries run on dedicated processing units

    Capacity reservations change how compute is bought and isolated, not how many bytes a query reads, so scans stay the same.

  • b
    Schedule the AWS Glue crawler to run hourly so that the table schema picks up new fields that appear in the JSON files

    Crawling more often keeps the schema fresh but does not reduce the data a query must read.

  • c
    Run an AWS Glue ETL job that converts the incoming JSON files to Apache Parquet in a new curated table Correct

    Parquet is columnar, so a query that reads 5 of 120 fields reads only those columns, and Athena bills on bytes scanned.

  • d
    Move event objects older than 30 days to the S3 Intelligent-Tiering storage class with a lifecycle rule

    Storage classes lower storage cost; Athena still scans the same bytes and the queries are no cheaper.

  • e
    Partition the curated table by event date and have analysts filter on the partition column in queries Correct

    With date partitions, a query for the last few days reads only those partitions instead of the whole history.

The concept

Athena cost is driven by bytes scanned; columnar formats cut columns read and partitions cut files read.

Why that’s the answer

Queries read few columns and few days, so the two biggest savings are columnar storage (Parquet) and partition pruning (date partitions). Together they shrink scanned bytes by orders of magnitude for this access pattern. Capacity reservations, crawler frequency and storage classes change other costs but leave bytes scanned unchanged.

How to reason it out
  1. Note the access pattern: few columns, recent dates.
  2. Match "few columns" to a columnar format and "recent dates" to partitioning.
  3. Reject options that change compute purchase, schema freshness or storage price.

Exam tip: To cut Athena scans: columnar format for the columns you skip, partitions for the rows you skip.

SAP-C03 Event-Driven, Serverless and Multi-Tenant Architecture — the lesson that teaches this.

What SAP-C03 domain 1 tests, topic by topic

The official exam guide breaks Architecture Design and Implementation Built for the Cloud into 6 topics. The question bank follows the same split, so a weak topic shows up as a cluster of misses you can go back and read.

Published SAP-C03 practice questions per topic in Architecture Design and Implementation Built for the Cloud
TopicWhat it coversQuestions
Design architectures built for the cloud: event-driven, serverless and multi-tenantOfficial SAP-C03 Task 1.1 skills (part 1 of 2 — the guide's 13-skill task is split in two topics): (1.1.1) Design event-driven architectures that use appropriate messaging patterns such as idempotency, ordering, and delivery guarantees (for example, by using Amazon EventBridge, Amazon SQS FIFO queues and standard queues, Amazon SNS, Amazon Kinesis with partition keys). (1.1.2) Design stateless applications that use externalized state management (for example, by using Amazon DynamoDB, Amazon S3, Amazon ElastiCache). (1.1.3) Design serverless data processing and analysis pipelines (for example, by using Amazon Kinesis Data Streams, AWS Glue, Amazon Athena, AWS Lambda). (1.1.4) Design multi-step workflows that have durable execution patterns (for example, by using AWS Step Functions, durable Lambda functions). (1.1.5) Implement cross-account and cross-Region event routing patterns that use event buses and event forwarding. (1.1.12) Design architectures that support real-time data processing by using WebSocket and publish-subscribe patterns (for example, by using API Gateway WebSocket APIs). (1.1.13) Design multi-tenant architectures that use tenant isolation patterns (for example, siloed or pooled resources, Amazon Cognito tenant context, row-level security, tenant-specific encryption).37
Design architectures built for the cloud: containers, scaling, ingress and edgeOfficial SAP-C03 Task 1.1 skills (part 2 of 2): (1.1.6) Design container orchestration for microservices by using managed services (for example, Amazon EKS, Amazon ECS, AWS Fargate). (1.1.7) Design service mesh architectures that facilitate microservice communication and observability (for example, by using Amazon VPC Lattice, Amazon ECS Service Connect). (1.1.8) Manage container images by configuring security scans and lifecycle policies (for example, by using Amazon ECR). (1.1.9) Design auto scaling patterns for serverless and containerized workloads (for example, by using Lambda concurrency, Horizontal Pod Autoscaler, Cluster Autoscaler, Amazon ECS service auto scaling, AWS Application Auto Scaling). (1.1.10) Design ingress patterns and optimize resources for specific usage patterns (for example, Application Load Balancer, Network Load Balancer, AWS Load Balancer Controller, Amazon API Gateway). (1.1.11) Design edge architectures to meet latency requirements (for example, by using Amazon CloudFront Functions, Lambda@Edge).37
Integrate AI and ML services into architecturesOfficial SAP-C03 Task 1.2 skills: (1) Design generative AI integrations for applications, including for multi-account deployment patterns (for example, by using Amazon Bedrock). (2) Design AI agent architectures that integrate with tools (for example, by using Amazon Bedrock AgentCore, Amazon Bedrock Knowledge Bases). (3) Design ML inference architectures (for example, Amazon SageMaker AI endpoints). (4) Design RAG architectures, including ingestion and retrieval strategies (for example, Amazon Bedrock knowledge bases that use vector stores).37
Design hybrid cloud integration patternsOfficial SAP-C03 Task 1.3 skills: (1) Design hybrid connectivity that provides redundancy and failover capabilities (for example, by using AWS Direct Connect, AWS VPN, AWS Transit Gateway). (2) Design data synchronization strategies for hybrid workloads (for example, by using AWS DataSync, AWS Storage Gateway, AWS Transfer Family). (3) Design integration patterns to modernize legacy systems by using data transformations (for example, by using API Gateway, Lambda, Amazon MQ). (4) Design DNS solutions for hybrid environments (for example, by using Amazon Route 53 Resolver endpoints, Route 53 private hosted zones, split-horizon DNS, conditional forwarding). (5) Design hybrid compute patterns (for example, by using Amazon EKS Anywhere, Amazon ECS Anywhere, AWS Outposts, AWS Local Zones).37
Design network architecturesOfficial SAP-C03 Task 1.4 skills: (1) Design multi-VPC architectures that provide hybrid and multi-account connectivity (for example, VPC peering, AWS PrivateLink). (2) Design VPC architectures by using subnet strategies, IP address management, and network segmentation (for example, by using Amazon VPC IP Address Manager [IPAM], public and private subnets). (3) Design network security architectures that include traffic inspection, traffic filtering, and application layer protection (for example, by using AWS Network Firewall, AWS WAF, Gateway Load Balancers, security groups, network ACLs, VPC Flow Logs). (4) Design IPv6 adoption and dual-stack migration strategies. (5) Design global traffic routing strategies for multi-Region applications (for example, by using Route 53 routing policies, AWS Global Accelerator).37
Design data, storage, and database architecturesOfficial SAP-C03 Task 1.5 skills: (1) Design data lake and lakehouse architectures (for example, by using Amazon S3, AWS Lake Formation, Amazon Redshift Spectrum, Apache Iceberg). (2) Design real-time and batch analytics pipelines (for example, by using Amazon EMR, Amazon Redshift, Amazon Managed Streaming for Apache Kafka [Amazon MSK], Amazon AppFlow). (3) Select appropriate database services based on workload requirements such as access patterns, consistency needs, and scalability (for example, Amazon RDS, Amazon Aurora, Amazon DynamoDB, Amazon Redshift). (4) Design database scaling solutions to provide high availability (for example, by using read replicas, Amazon Aurora Global Database, Amazon DynamoDB global tables, Amazon RDS Multi-AZ deployments). (5) Design storage architectures based on access patterns and performance requirements (for example, by using Amazon S3, Amazon EBS, Amazon EFS, Amazon FSx). (6) Design data caching strategies to optimize performance (for example, by using ElastiCache, DynamoDB Accelerator [DAX]). (7) Design data cataloging and cross-account data sharing patterns (for example, AWS Glue Data Catalog, Lake Formation, AWS Clean Rooms).37
Total222

Revise Architecture Design and Implementation Built for the Cloud before you drill it

Other SAP-C03 domains

Architecture Design and Implementation Built for the Cloud: your questions

Architecture Design and Implementation Built for the Cloud is domain 1 of the SAP-C03 exam guide and carries 25% of the scored content — the heaviest of the 5 domains. On a 75-question paper that works out to roughly 19 questions, though AWS does not publish an exact per-domain count and individual exam forms vary.

Source

The domain weight and topic list on this page come from the official SAP-C03 exam guide.