Frequently Asked Questions
Do I need AWS Cloud Practitioner before SAA-C03?
There are no formal prerequisites. If you have 1+ year of hands-on AWS experience, you can go straight to SAA-C03. If AWS is new to you, Cloud Practitioner builds a useful foundation first.
How many practice questions should I aim for?
Aim for at least 800 unique questions across all domains, ensuring you prioritize quality over quantity. ExamOS provides over 3,000 high quality practice questions covering all domains and designed to explain the rationale behind both correct and incorrect answers.
When should I book the exam?
Once you are consistently hitting 80% or above on Legend mode across two or more sessions, and you feel comfortable explaining architecture decisions for realistic scenarios, you are ready. Trust your preparation.
How long is the exam?
130 minutes for 65 questions. That averages to 2 minutes per question. Some scenario questions may take longer, so keep an eye on the clock. The 15 unscored questions are indistinguishable from the 50 scored ones, so answer every question as if it counts.
What is the passing score?
720 out of 1000. AWS uses scaled scoring, so the raw number of correct answers needed varies slightly between exam versions. Do not try to calculate how many questions you can afford to miss.
I am a non-native English speaker. Can I get extra time?
Yes, under certain conditions. AWS offers an additional 30 minutes for candidates whose primary language is not the language of the exam. If you are taking the exam in English but English is not your primary language, you can request this accommodation:
- When scheduling your exam through Pearson VUE, select the option for additional time for non-native English speakers.
- This is available for exams delivered in English, Japanese, Korean, Simplified Chinese, Traditional Chinese, Spanish, French, German, Italian, Portuguese, and Indonesian.
- If the exam is available in your primary language, you can still take it in English with the extra time, as long as you meet the non-native speaker criteria.
Request this accommodation when scheduling. It is a straightforward process through the registration system.
Can I use reference materials during the exam?
No. The AWS SAA-C03 exam is closed-book. You cannot access documentation, websites, or any external resources during the test. All questions are designed to be answerable from your knowledge of AWS services, architecture patterns, and the Well-Architected Framework.
What is the most important domain to study?
Design Secure Architectures (30%) is the heaviest domain, but all four carry enough weight that skipping one is risky. Security also shows up as a thread through questions in every other domain. The biggest trap is over-studying the services you use daily at work and under-studying the domains you rarely touch.
What is the Well-Architected Framework?
The AWS Well-Architected Framework is a set of best practices organized around six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability. It underpins many SAA-C03 design decisions. Review it in Week 1 and refer back to it throughout the plan.
What are the most common ways people fail?
- Confusing Security Groups with NACLs. Security Groups are stateful and operate at the instance level. NACLs are stateless and operate at the subnet level. This distinction appears in questions constantly.
- Not knowing the difference between S3 storage classes. Intelligent-Tiering, Standard-IA, Glacier Instant Retrieval, and Glacier Deep Archive have different retrieval times and costs. The exam tests whether you can match access patterns to the right tier.
- Confusing VPC Peering with Transit Gateway. VPC Peering is point-to-point and not transitive. Transit Gateway is a hub that connects many VPCs. Know when each is the right choice.
- Ignoring the Shared Responsibility Model. Questions frequently test whether you understand what AWS manages and what you manage, especially for services like RDS, Lambda, and ECS.
- Choosing the most feature-rich service instead of the simplest one that meets the requirements. The exam rewards right-sized solutions. If SQS Standard meets the requirements, do not pick Kinesis.
- Not understanding RTO and RPO. Being able to define them is not enough. You must map them to specific AWS architecture patterns (backup/restore, pilot light, warm standby, multi-site).
What are the three biggest preparation mistakes?
- Studying service features without studying architecture patterns. SAA-C03 tests judgment. Knowing that Aurora supports Global Database is table stakes. Knowing when to use it versus RDS Read Replicas for a specific DR requirement is what the exam measures.
- Not practicing hands-on. The exam tests practical knowledge. Reading documentation alone is not enough. Build a VPC, launch instances, configure load balancers, set up replication. The experience sticks in a way that reading never does.
- Ignoring cost optimization. At 20% of the exam, cost optimization is not a small topic. Questions frequently test whether you know the trade-offs between On-Demand, Reserved, Spot, and Savings Plans, and whether you can right-size resources for a described workload.
Is there a renewal option?
Yes. SAA-C03 is valid for 3 years. To renew, you can retake the current version of the exam or advance to a higher-level certification (such as AWS Solutions Architect Professional), which automatically recerts your Associate-level credential. AWS also offers a recertification pathway through their digital badge program. Check the AWS Certification portal for the most current renewal options.
Quick-Reference: What Is on the Exam
For the full, always-current list, visit the official SAA-C03 exam guide.
| Domain |
Key Skills |
| Design Secure Architectures (30%) |
IAM policies, roles, permission boundaries, cross-account access, AWS Organizations and SCPs, KMS encryption (CMKs, envelope encryption, key rotation), Secrets Manager vs Parameter Store, Shield (Standard and Advanced), WAF (Web ACLs, rule groups), CloudTrail, Config, GuardDuty, Security Hub, VPC security (Security Groups, NACLs, flow logs) |
| Design Resilient Architectures (26%) |
Multi-AZ and Multi-Region patterns, Auto Scaling Groups and policies, Elastic Load Balancing (ALB, NLB, GLB), Route 53 routing policies (failover, weighted, latency, geolocation), DR strategies (backup/restore, pilot light, warm standby, multi-site), RTO/RPO mapping, S3 replication, Aurora Global Database, AWS Backup |
| Design High-Performing Architectures (24%) |
EC2 instance selection and placement, EBS volume types and optimization, S3 performance (multipart upload, Transfer Acceleration, replication), RDS and Aurora Read Replicas, DynamoDB (partition keys, GSIs, DAX, global tables), ElastiCache (Redis, Memcached), CloudFront (caching behaviors, origin groups), Kinesis, Lambda performance tuning |
| Design Cost-Optimized Architectures (20%) |
EC2 purchase options (On-Demand, Reserved, Spot, Savings Plans, Dedicated Hosts), compute right-sizing, S3 storage classes and Intelligent-Tiering, EBS volume cost optimization, RDS and Aurora cost management, DynamoDB capacity modes (on-demand vs provisioned), AWS Budgets, Cost Explorer, Trusted Advisor, tagging for cost allocation |