Understanding the Exam Format and Domain Weights

The AWS Certified Solutions Architect – Associate (SAA-C03) exam consists of 65 questions to be answered in 130 minutes (~2 minutes per question). The passing score is 720 out of 1000. Questions are either multiple-choice (one correct answer) or multiple-response (two or more correct answers from five options). The exam is scenario-based — you must apply AWS knowledge to business and technical scenarios, not recall isolated facts.

SAA-C03 is divided into four scored domains. Domain 1 – Design Secure Architectures: 30%. Domain 2 – Design Resilient Architectures: 26%. Domain 3 – Design High-Performing Architectures: 24%. Domain 4 – Design Cost-Optimised Architectures: 20%. Security is the heaviest domain, reflecting AWS's security-first ethos. Note that Operational Excellence and Sustainability (from the Well-Architected Framework) are not separate domains — they appear within the other four domains.

Domain 1 (30%) covers: IAM users, roles, policies, and permission boundaries; S3 bucket policies and ACLs; VPC security (NACLs, security groups, VPC endpoints); encryption at rest and in transit with KMS and ACM; AWS security services (GuardDuty, Macie, Inspector, Security Hub); Secrets Manager and Parameter Store; WAF, Shield, and Network Firewall. Being the heaviest domain, you cannot afford to be weak here. Focus especially on IAM policy logic and VPC network security.

Domain 2 (26%) covers: multi-AZ and multi-Region designs; Auto Scaling Groups with launch templates and scaling policies; Elastic Load Balancing (ALB/NLB/GLB); RDS Multi-AZ and Read Replicas; Route 53 routing policies and health checks; S3 versioning, MFA Delete, and cross-region replication; decoupled architectures with SQS, SNS, and EventBridge; disaster recovery strategies (RTO/RPO, backup-restore, pilot light, warm standby, active-active). Resilience and high availability underpin almost every architecture question.

Domain 3 (24%) covers: selecting compute types (EC2 instance families, Lambda, ECS/Fargate, EKS); storage selection (EBS volume types, EFS, FSx for Windows/Lustre, S3 storage classes); database selection (RDS, DynamoDB, ElastiCache, Redshift, Aurora); networking performance (CloudFront, Global Accelerator, enhanced networking, placement groups); analytics (Kinesis, Athena, Glue, Redshift); caching with ElastiCache. Questions ask you to identify the service that meets a specific performance or scalability requirement.

Domain 4 (20%) covers: EC2 pricing models (On-Demand, Reserved Instances, Savings Plans, Spot); right-sizing with Compute Optimizer; S3 storage classes and lifecycle policies; identifying idle or underutilised resources; serverless cost advantages (Lambda pay-per-invocation vs always-on EC2); data transfer cost reduction (CloudFront, VPC endpoints, inter-AZ vs inter-Region transfer); Cost Explorer, Budgets, and cost allocation tags; Reserved Instances vs Savings Plans trade-offs.

Most SAA-C03 questions are multiple-choice with one correct answer and three distractors. The distractors are plausible — they describe real AWS services and configurations but fail to satisfy all the requirements in the scenario. Always read the question stem for explicit constraints: 'most cost-effective', 'least operational overhead', 'highest availability', or 'without modifying the application'. These words eliminate distractors that otherwise seem reasonable.

Multiple-response questions ask you to select 2, 3, or sometimes more correct answers from 5 options. They are typically harder than single-answer questions because all selected answers must be correct — partial credit is not awarded. The question stem explicitly states 'Select TWO' or 'Select THREE'. When you see a multiple-response question, apply the same process of elimination but identify ALL clearly wrong answers first, then choose from the remaining plausible options.

Of the 65 questions, approximately 15 are unscored pretest questions that AWS uses to evaluate new question quality. You cannot tell which questions are pretest — they appear identical to scored questions. Do not skip or rush any questions assuming they might be pretest. Answer all questions to the same standard. The remaining 50 questions determine your score and are calibrated so that a 720 score represents competence across all four domains.

Allocate study time proportional to domain weights. Spend approximately 30% of study time on security (IAM, VPC security, encryption, GuardDuty/Macie). 26% on resilience (Multi-AZ, Auto Scaling, DR strategies, Route 53). 24% on performance (instance types, database selection, caching, CloudFront). 20% on cost optimisation (pricing models, S3 tiering, right-sizing). A weak Domain 1 is the most common reason candidates fail — it is both the heaviest domain and one where conceptual misunderstanding is easy.

The exam is available at Pearson VUE test centres or as an online proctored exam from home. You are given a digital whiteboard (no physical paper at test centres) for scratch work. An in-browser flag for review feature lets you mark uncertain questions and return to them. There is no penalty for wrong answers, so never leave a question unanswered — if you are unsure, select your best guess and flag it for review before submitting.

Test your understanding of AWS Solutions Architect (SAA-C03) concepts from this lesson.

In this lesson you learned: SAA-C03 has 65 questions in 130 minutes with a 720/1000 passing score, the four domains are Secure (30%), Resilient (26%), High-Performing (24%), and Cost-Optimised (20%), and approximately 15 questions are unscored pretest items that cannot be identified. Next up we explore how to identify keywords and service signals within exam questions.