Determine appropriate data security controls.
60 practice questions under this official exam objective (SAA-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
60 total · page 3 of 3Handling Large Data with DynamoDB and S3 | SAA-C03
This page explains the AWS best practice for storing large binary objects while using Amazon DynamoDB as the primary metadata store, identifying Optio
Encrypting Lambda Environment Variables with KMS
This question examines AWS security controls for protecting sensitive data in serverless environments, specifically focusing on the encryption of Lamb
Detecting Abnormal RDS Login Attempts with GuardDuty
This question addresses identifying abnormal database login attempts in an AWS Organization using Amazon GuardDuty's RDS Protection feature for operat
Encrypting AWS Glue ETL with Customer-Specific CSE-KMS Keys?
AWS Glue jobs paired with client-side encryption using AWS KMS (CSE-KMS) security configurations let the medical company transform clinical trial data
AWS DMS Serverless for Dynamic Data Replication
This question addresses how to dynamically allocate compute resources for AWS Database Migration Service (DMS) replication tasks. It establishes that
S3 Object Lock Compliance Mode for Data Retention
S3 Object Lock in compliance mode is the correct solution for protecting S3 objects from deletion or modification during a fixed retention period to m
Amazon Neptune for IT Infrastructure Security Graphs
This question evaluates the selection of Amazon Neptune for mapping IT infrastructure as a graph to efficiently identify security risks with minimal o
Cost-Effective Resilient DynamoDB Architecture
This question evaluates the cost-effective design of a resilient Amazon DynamoDB architecture using Global Tables and Provisioned Capacity with Auto S
Least Overhead Credential Storage and Retrieval
AWS Secrets Manager is the correct service for securely managing employee credentials compared to Parameter Store. Using CloudFormation with the nativ
How to Migrate Oracle EE with BYOL and Privileged Third-Party Features to AWS?
Migrating an Oracle Database Enterprise Edition workload that depends on third-party features with privileged access, while using the BYOL model, is m
Amazon Neptune for Social Graph Connections
This page analyzes the optimal database solution for storing and querying highly connected social graph data, specifically identifying Amazon Neptune
How Do You Securely Give a Private-Subnet App Cognito-Based S3 Access?
A private-subnet application already authenticates users with an Amazon Cognito user pool and now needs secure per-user access to Amazon S3. The corre
S3 Intelligent-Tiering for Variable Access Patterns
Amazon S3 Intelligent-Tiering is the optimal cost-effective storage solution for data with unpredictable access patterns, automatically moving objects
Identifying Non-Versioned S3 Buckets with Storage Lens
Amazon S3 Storage Lens provides comprehensive metrics and recommendations, including identifying buckets that are not versioning-enabled across region
Encrypting S3 Archival Data Before Upload to AWS?
This SAA-C03 question tests how to encrypt sensitive archival files before they are sent to Amazon S3. It establishes that client-side encryption with
How Do You Give an External Consultant 7-Day Access to One S3 Report?
Sharing a single Amazon S3 object with an external auditor for a fixed 7-day window is best solved with a presigned URL, which scopes time-limited acc
How to Centralize and Automate EC2, RDS, and DynamoDB Backups on AWS?
AWS Backup is the native, centralized service for scheduling and monitoring backups across Amazon EC2, Amazon RDS, and Amazon DynamoDB from a single c
Least-Overhead Password Rotation for Amazon RDS for PostgreSQL?
Password rotation for Amazon RDS for PostgreSQL is a credential-management task, and AWS Secrets Manager is the only service in these options that pro
Resolving Stale Data in Amazon DynamoDB
This question addresses how to ensure users see the most recent data in Amazon DynamoDB by switching from eventual consistency to strongly consistent
Prevent DynamoDB Accidental Deletion
Learn how to prevent accidental deletion of critical Amazon DynamoDB tables with the least operational overhead. The correct solution is enabling Dele