Determine appropriate data security controls.

60 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.

Questions under this objective

60 total · page 1 of 3
SAA-C03 S-grade

Serverless Data Analysis with S3 CRR and SSE-S3

This question evaluates the optimal serverless architecture for analyzing S3 data with cross-region replication and encryption, focusing on minimizing

155 comments
SAA-C03 S-grade

Minimizing Credential Overhead for EC2 and Aurora

This SAA-C03 scenario asks how an EC2-hosted application should stop storing Aurora user names and passwords in a local file while cutting credential-

113 comments
SAA-C03 S-grade

Protecting S3 Data from Accidental Deletion

This AWS Solutions Architect (SAA-C03) question asks which two Amazon S3 controls together protect critical data from accidental deletion. Enabling ve

83 comments
SAA-C03 S-grade

Most Cost-Effective 7-Year Retention for EBS Snapshots?

This scenario tests the most cost-effective way to retain monthly EBS snapshots for 7 years with minimal administrative effort. The analysis shows tha

25 comments
SAA-C03 S-grade

FSx for Lustre with Snowball Edge and S3 Integration

To provide sub-millisecond latency to an HPC cluster using data from Snowball Edge, you must import the data into Amazon S3 and then integrate it with

21 comments
SAA-C03 A-grade

Which S3 encryption, replication, and serverless SQL design has least overhead?

This SAA-C03 question tests the least-overhead way to encrypt, cross-Region replicate, and SQL-query data in Amazon S3. It establishes that configurin

20 comments
SAA-C03 S-grade

S3 Encryption with Automatic Key Rotation

This question tests the configuration of Amazon S3 encryption to meet automatic annual key rotation requirements. The correct solution involves using

17 comments
SAA-C03 S-grade

Minimizing Cost for Automated S3 Key Rotation

AWS managed KMS keys provide automatic annual rotation and CloudTrail logging without monthly fees, making them the most cost-effective solution compa

16 comments
SAA-C03 S-grade

FSx for NetApp ONTAP Multi-Protocol Access

This question tests the selection of a storage solution supporting both SMB and NFS protocols with intelligent tiering. The correct answer is B, as FS

15 comments
SAA-C03 S-grade

Cost-Effective EFS Cross-Region Replication Solution

Determines the most cost-effective AWS managed service for replicating Amazon EFS data across regions by evaluating native replication versus backup s

14 comments
SAA-C03 S-grade

Cost-Optimized Managed PostgreSQL for Developers

This question tests the selection of a cost-effective managed database solution for intermittent developer usage, establishing that Amazon Aurora Serv

13 comments
SAA-C03 S-grade

S3 CRR and Encryption for Serverless SQL Analysis

This question evaluates the optimal configuration for serverless data analysis using Amazon Athena, requiring Cross-Region Replication (CRR) and encry

12 comments
SAA-C03 S-grade

Optimize Aurora PostgreSQL Storage for High Traffic

This question addresses how to select the most cost-effective storage configuration for an Amazon Aurora PostgreSQL Serverless v2 cluster under high t

12 comments
SAA-C03 S-grade

Prevent KMS Key Deletion with EventBridge and SSM Automation

This question tests how to prevent accidental deletion of AWS KMS keys using Amazon EventBridge and AWS Systems Manager Automation while minimizing op

12 comments
SAA-C03 S-grade

How to Prevent EFS Dataset Modification with IAM Access Control

Amazon EFS supports IAM access control through file system resource policies that deny elasticfilesystem:ClientWrite to specific IAM roles. This page

12 comments
SAA-C03 S-grade

Optimizing Low-Latency Content Uploads to AWS S3

This question evaluates the best method for minimizing upload latency for global mobile app users by leveraging Amazon S3 Transfer Acceleration's edge

11 comments
SAA-C03 A-grade

Lambda SNS KMS Encryption Permissions

This question tests the necessary IAM and resource policies for a Lambda function publishing encrypted messages to an Amazon SNS topic using a Custome

10 comments
SAA-C03 S-grade

AWS Storage Gateway for On-Premises SMB File Copy

AWS Storage Gateway provides a seamless hybrid cloud storage solution that allows on-premises applications to store files in AWS via standard protocol

10 comments
SAA-C03 S-grade

AWS Storage Gateway Volume vs File Gateway for On-Premises

This question tests the selection of AWS Storage Gateway modes for hybrid storage scenarios. The correct solution uses Volume Gateway with cached volu

10 comments
SAA-C03 A-grade

S3 Event Notifications with Lambda for Metadata Extraction

This page explains how to design a cost-effective architecture for processing S3 uploads using event notifications and AWS Lambda, which is the correc

9 comments