Skip to content
AWSVerified and updated

AWS Certified Solutions Architect - Professional SAP-C03

100 real AWS SAP-C03 questions with answers checked by certified engineers. Start free, upgrade when you are ready.

See 2 free PDFs
Questions
100
Exam code
SAP-C03
Last updated
Oct 7, 2026
Language
English
Certification
AWS Certified Solutions Architect - Professional
Free, no account needed

Try SAP-C03 free

Open a PDF shared by candidates who sat the exam, or answer questions in the online test engine.

Free files are partial. Full access has all 100 questions.

Free online test engine

Practise SAP-C03 questions in your browser and see how the real exam is set out.

Start the free test
Free preview

SAP-C03 sample questions

2 questions from the SAP-C03 practice set, with the answer and explanation.

  1. Question 1
    A company is standardizing generative AI across 60 accounts. Only approved Amazon Bedrock foundation models may be invoked, and the restriction must hold even for account administrators. Which control enforces this best?
    • A.
      An IAM permissions boundary in each account that lists the approved models and the teams allowed to use them
    • B.
      A Bedrock model invocation log that the security team reviews every week
    • C.
      An SCP at the organization root that denies model invocation outside an approved allow-list of models
    • D.
      A CloudWatch alarm on invocation counts for each team
    Show answer

    Correct answer:

    • C.
      An SCP at the organization root that denies model invocation outside an approved allow-list of models

    Explanation

    An SCP at the root applies to every member account and cannot be bypassed by local IAM administrators, so it enforces the allow-list everywhere. A permissions boundary is managed inside each account and can be changed by its administrators. Invocation logs and alarms only show activity after it has happened.
  2. Question 2
    A service control policy can deny actions performed by the root user of a member account, but it cannot restrict actions performed by IAM roles in that account.
    • A.
      True
    • B.
      False
    Show answer

    Correct answer:

    • B.
      False

    Explanation

    An SCP restricts all principals in a member account, including the root user and IAM roles, so the statement is false on both counts. Its limits apply to the whole account, which is why it is the main preventive control in an organization. Only the management account sits outside SCP restrictions.
Exam detail

About AWS SAP-C03

Related Practice Questions

We help aspirants prepare for the AWS certification exam without spending money on preparation materials. Many candidates download the SAP-C03 AWS Certified Solutions Architect - Professional practice questions PDF here. You can easily download AWS SAP-C03 PDF practice questions for free. If you have any questions about the exam product, you can view the comments. You can also publish comments about SAP-C03 exam questions in PDF format.
FAQ

SAP-C03 FAQ

What is the AWS SAP-C03 exam?

SAP-C03 is the AWS Certified Solutions Architect - Professional exam.

How many questions are in the SAP-C03 practice set?

The full SAP-C03 practice set has 100 questions with answers.

Can I try SAP-C03 practice questions for free?

Yes. This page has 2 free SAP-C03 PDF files shared by other candidates, and a free online test engine where you can answer SAP-C03 questions in your browser. No account is needed.

What formats are the SAP-C03 practice questions available in?

SAP-C03 practice questions are available in these formats: PDF and Online Practice Exam. You can also get them together in a bundle.

How much does SAP-C03 practice material cost?

SAP-C03 practice material starts from $59 USD.

Are these the actual SAP-C03 exam questions?

No. They are exam-style practice questions written from the official SAP-C03 exam objectives, not actual exam content.

Reviews and Discussion

Loading comments