Determine appropriate data security controls.
60 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
60 total · page 2 of 3S3 Multipart Upload and Parallel Byte-Range Fetches
To scale throughput for large S3 uploads and downloads, use multipart uploads for parallelizing data ingestion and fetching byte-ranges in parallel fo
How to Enforce Default EBS Encryption and Block Unencrypted Volumes?
Amazon EBS encryption by default is a Region-level EC2 account attribute that automatically encrypts all new EBS volumes and prevents unencrypted volu
Client-Side Encryption for External Key Management
This question explores the requirements for encrypting sensitive data in Amazon S3 while maintaining external control over encryption keys. The correc
Encrypting S3 Objects with SSE-C via Batch Operations
This question addresses encrypting existing and future Amazon S3 objects using a customer-provided key (SSE-C). The correct solution utilizes S3 Inven
S3 Server-Side Encryption with Customer-Specific KMS Keys
This question tests the correct configuration for encrypting Amazon S3 data at rest using separate AWS KMS keys per customer. The page establishes tha
EBS Snapshot Recycle Bin for Accidental Deletion Prevention
This question examines how to prevent accidental deletion of EBS snapshots using AWS Recycle Bin, balancing data protection with retention policies. T
Least Overhead Sentiment Analysis with Textract and Comprehend
This question evaluates the ability to select a managed NLP service for sentiment analysis following document processing. The correct solution leverag
AWS Managed Immutable Ledger with QLDB
Amazon QLDB is the cost-effective, fully managed service that provides immutable and cryptographically verifiable transaction logs for accounting reco
Recover Accidentally Deleted AMIs with Least Overhead
This page explains how to use Amazon EC2 Recycle Bin to protect critical AMIs from accidental deletion with minimal operational overhead. It establish
Migrating SMB File Storage to AWS with Least Overhead
This page explains how to migrate large volumes of unstructured SMB data to AWS using AWS DataSync and Amazon FSx for Windows File Server, ensuring pr
Client-Side Encryption for Pre-Upload S3 Data Security
This question tests the requirement to encrypt sensitive data before it reaches Amazon S3, which mandates client-side encryption using customer-manage
S3 Object Lambda for Redacting PII with Least Overhead
This question tests the use of S3 Object Lambda to dynamically redact sensitive data like PII from text files without storing separate copies. The cor
AWS KMS Key Management for Multi-Tenant Data
This page explains how to implement separate encryption keys per customer using AWS KMS with minimal operational overhead. It establishes that granula
Identifying Non-Versioned S3 Buckets Across Regions
This question addresses how to monitor Amazon S3 bucket configurations, specifically versioning status, across multiple AWS regions using native monit
AWS Glue DataBrew for No-Code Data Transformation
This question evaluates the selection of AWS Glue DataBrew as a visual, no-code data preparation tool that handles profiling and lineage. It establish
DynamoDB Point-in-Time Recovery vs Backup
Point-in-time recovery (PITR) is the most efficient way to restore Amazon DynamoDB tables to any second within a retention window, minimizing operatio
Automating EBS Volume Encryption Compliance
AWS Config managed rules provide the most efficient method to audit and flag unencrypted Amazon EBS volumes, minimizing both cost and configuration ef
Aurora Global Database for Disaster Recovery
Aurora Global Database provides synchronous cross-region replication with automated failover, meeting strict RPO and RTO requirements with high operat
Migrating SQL Server to Aurora with Minimal Code Changes
This guide explains how to migrate a Microsoft SQL Server database to Amazon Aurora PostgreSQL while keeping application code changes minimal using AW
How to Encrypt PII at Rest on EC2 and RDS with Least Change?
Encrypting PII at rest for an EC2 application backed by Amazon RDS is achieved with the fewest infrastructure changes by turning on Amazon EBS encrypt