Free SAA-C03 practice scenarios: data transfer costs

The bill people forget — where bytes cost money, and how architecture avoids it. Six cost scenarios, SAA-C03, 2026 edition.

Try 6 free data-transfer-cost scenarios in the exam's own style — every answer explained, no sign-up.

Straight to the 6 free questions ↓

Data transfer is the cost line people forget, and the SAA-C03 tests whether you know where bytes cost money and which architectural move avoids it. None of it requires memorising prices — just the relationships.

The core rules

Inbound from the internet → generally free. Outbound (egress) to the internet → charged. This asymmetry drives many designs.
Within AWS: same-AZ traffic over private IPs is free; cross-AZ and cross-Region traffic is charged.

So a chatty pair of instances split across AZs pays inter-AZ charges — co-locate them in one AZ when high availability does not require the split. And continuous cross-Region replication bills for every byte — stay in one Region unless a second is genuinely needed for DR or latency.

Put the right service in the path

Three moves recur in the answers:

CloudFront for high-volume delivery of S3 content to the internet — lower egress pricing, free S3-to-CloudFront transfer, and caching that cuts origin fetches.
Gateway VPC endpoint for S3/DynamoDB so private-subnet traffic bypasses the NAT gateway, removing NAT data-processing charges (and the endpoint itself is free).
Direct Connect for large, steady hybrid transfer, giving lower and more predictable rates than the public internet (a VPN still rides the internet and does not).

The distractors

Watch for options that add a NAT gateway or public IPs where a VPC endpoint avoids the charge, or that move data across Regions to “a cheaper Region” and incur cross-Region transfer instead. The cheapest byte is often the one that never leaves the AZ.

How to use the six scenarios below

Answer each one before opening the explanation, and when you miss, name where the cost was arising — “internet egress”, “cross-AZ”, “NAT processing”, “cross-Region”, “hybrid over the internet”. Every explanation states that source and dismantles the distractors, which usually route traffic somewhere that still costs. For the domain overview, see Design Cost-Optimized Architectures.

Where AWS data transfer costs arise. Inbound data from the internet is free, while outbound to the internet is charged. Traffic between Availability Zones and between Regions is charged, while communication within one Availability Zone over private IPs is free. Serving S3 content through CloudFront lowers egress cost and the S3-to-CloudFront transfer is free. A gateway VPC endpoint for S3 avoids NAT gateway data-processing charges, and AWS Direct Connect gives lower, predictable transfer rates than the public internet for hybrid links.

6 free SAA-C03 practice questions

Answers and explanations — no email wall

SAA-C03 Question 1 of 6

A company serves large volumes of images and video from Amazon S3 directly to internet users worldwide and wants to reduce the data-transfer cost of delivering it. What should a solutions architect recommend?

Answer: A — Serve the content through Amazon CloudFront.

Delivering S3 content through CloudFront lowers egress cost — CloudFront's data-transfer-out pricing is generally lower, the transfer from S3 to CloudFront is free, and caching reduces repeat fetches from the origin. Why not the others: the storage class affects storage cost, not egress pricing. S3 Transfer Acceleration speeds uploads and adds cost, it does not reduce download egress. Moving the bucket to another Region does not change per-GB internet egress meaningfully and adds latency. Cheaper large-scale delivery to the internet is CloudFront.

SAA-C03 Question 2 of 6

Two EC2 instances exchange a large, continuous volume of traffic and are deployed in different Availability Zones, generating ongoing inter-AZ data-transfer charges. The workload does not require cross-AZ placement. How can the transfer cost be reduced?

Answer: A — Place the two instances in the same Availability Zone so traffic between them over private IPs is free.

Traffic between instances in the same Availability Zone using private IP addresses is free, so co-locating the two chatty instances in one AZ removes the inter-AZ charge — appropriate when cross-AZ placement is not required. Why not the others: moving one to another Region introduces cross-Region charges, which are higher. Routing through a NAT gateway adds processing charges. Using public IPs can route traffic over paths that incur charges even within a Region. Same-AZ private-IP traffic is free; cross-AZ is charged.

SAA-C03 Question 3 of 6

Which statement about AWS data transfer pricing is correct?

Answer: A — Data transferred into AWS from the internet is generally free, while data transferred out to the internet is charged.

As a rule, inbound data transfer from the internet is free and outbound (egress) to the internet is billed — the asymmetry that shapes many cost designs. Why not the others: the two directions are not charged equally, and the relationship is not reversed — it is egress that costs. And data transfer within AWS is not always free: cross-AZ and cross-Region transfer are charged. Free in, paid out is the core rule.

SAA-C03 Question 4 of 6

Instances in a private subnet download large amounts of data from Amazon S3 through a NAT gateway, incurring significant NAT data-processing charges. How can these charges be avoided?

Answer: A — Use a gateway VPC endpoint for S3 so traffic bypasses the NAT gateway.

A gateway VPC endpoint for S3 routes S3 traffic over the AWS private network at no charge and without a NAT gateway, eliminating the NAT data-processing cost — the targeted fix. Why not the others: public IPs and a public subnet expose the instances and still route S3 traffic in a way that can incur cost, and they weaken security. A bigger NAT gateway does not reduce per-GB processing charges. Avoiding NAT charges for S3 access is a gateway VPC endpoint.

SAA-C03 Question 5 of 6

A company transfers large, consistent volumes of data between its on-premises data center and AWS over the public internet, and finds the cost high and variable. What provides a lower, more predictable data-transfer rate?

Answer: A — AWS Direct Connect.

AWS Direct Connect is a dedicated private connection between on-premises and AWS that offers lower, more consistent data-transfer rates than the public internet for large, steady volumes. Why not the others: a site-to-site VPN still traverses the public internet, so it does not give the reduced, predictable transfer pricing. CloudFront accelerates content delivery to end users, not a hybrid data-center link. An internet gateway does not change transfer pricing. Cheaper, predictable hybrid transfer is Direct Connect.

SAA-C03 Question 6 of 6

A workload replicates data continuously between two AWS Regions and the cross-Region transfer cost is high. Assuming the second Region is not strictly required, what is the most direct way to reduce this cost?

Answer: A — Keep the data and processing within a single Region where possible.

Cross-Region data transfer is billed, so consolidating data and processing into a single Region (when a second Region is not required for DR or latency) removes the cross-Region charge directly. Why not the others: adding Availability Zones does not remove cross-Region transfer and can add cross-AZ charges. Routing replication through a NAT gateway adds processing cost. Larger instances do not change transfer pricing. When the second Region is optional, staying in one Region avoids cross-Region cost.

That is exactly how every question in the course works — answer, explanation, why-not. The real set continues in the practice player: 10 free questions, no sign-up.

Continue with the 10 free questions →

Those 6 questions were the start.

The exam does not test whether you recognise a term — it tests whether you can rule out three plausible answers under time pressure. That is what the explanations above are for, and there are 780 more questions built exactly like them.

Collecting questions yourself

Scattered across forums, of unknown age
Answer keys without reasoning
No idea which domain you are weak in

Practising with a system

780 questions in 12 full tests, SAA-C03 (2026)
Every option explained — including the wrong ones
Readiness per exam domain, and drills for your weakest

Start free — 10 questions

Straight into the player. No account, no email.

Frequently asked questions

What is the simplest mental model for AWS data transfer cost?

Inbound from the internet is generally free; outbound to the internet is charged. Within AWS, same-Availability-Zone private-IP traffic is free, while cross-AZ and cross-Region traffic is charged. Architectures that keep traffic local and put a CDN or VPC endpoints in the path reduce the bill.

Why does CloudFront reduce data-transfer cost from S3?

CloudFront's egress pricing is generally lower than serving directly from S3, the transfer from S3 to CloudFront is free, and edge caching means fewer repeat fetches from the origin. For high-volume delivery to internet users, that combination lowers the total transfer cost.

Are these real exam questions?

No. They are original scenarios written for this page in the exam's style and difficulty. Reproducing real exam items violates the AWS certification agreement and can cost a candidate their certification — ours come with the reasoning attached instead.

What is the one-line takeaway?

Free in, paid out; keep traffic in one AZ/Region; deliver via CloudFront; reach S3 through a gateway VPC endpoint to skip NAT charges; and use Direct Connect for large, steady hybrid transfer.

Updated for SAA-C03 (July 2026). The sample questions above are our own work in the style of the exam — not real exam items. The exam itself is set and marked by the certification body.