A company uses AWS Certificate Manager (ACM) to manage a public certificate for a website served by Amazon CloudFront. The certificate is about to expire. What should a solutions architect do to ensure the certificate is renewed automatically?

Import a new certificate from a third-party CA and attach it to CloudFront.

Use email validation instead of DNS validation for the certificate.

Manually renew the certificate by creating a new certificate and attaching it to CloudFront.

Ensure that the certificate was issued by ACM and that DNS validation was used.

A company wants to automatically transition objects in an S3 bucket to a lower-cost storage class after 30 days and then delete them after 1 year. Which AWS feature should be used to implement this?

S3 Cross-Region Replication (CRR)

A solutions architect needs to encrypt an Amazon EBS volume at rest. Which AWS service should be used to manage the encryption keys?

AWS Key Management Service (AWS KMS)

AWS Systems Manager Parameter Store

AWSCertified Solutions Architect - Associate

Domain 1Objective 3

Task 1.3: Determine Appropriate Data Security Controls SAA-C03 Practice Questions (Page 5)

Part of the Design Secure Architectures domain, which makes up ~18% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

Questions 21–25

21expert · hard
A company uses AWS Certificate Manager (ACM) to manage a public certificate for a website served by Amazon CloudFront. The certificate is about to expire. What should a solutions architect do to ensure the certificate is renewed automatically?
Select an answer first
22foundation · easy
A company wants to automatically transition objects in an S3 bucket to a lower-cost storage class after 30 days and then delete them after 1 year. Which AWS feature should be used to implement this?
Select an answer first
23foundation · easy
A company wants to encrypt data at rest in an Amazon S3 bucket using a customer-managed key in AWS KMS. Which type of encryption should be used?
Select an answer first
24foundation · easy
A US federal agency requires that its AWS workloads meet FedRAMP compliance. Which AWS feature or service provides the necessary compliance documentation and reports for FedRAMP?
Select an answer first
25foundation · easy
A solutions architect needs to encrypt an Amazon EBS volume at rest. Which AWS service should be used to manage the encryption keys?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SAA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAA-C03” is a trademark of its owner, used for identification only.

Task 1.3: Determine Appropriate Data Security Controls SAA-C03 Practice Questions (Page 5)

Questions 21–25

A company uses AWS Certificate Manager (ACM) to manage a public certificate for a website served by Amazon CloudFront. The certificate is about to expire. What should a solutions architect do to ensure the certificate is renewed automatically?

A company wants to automatically transition objects in an S3 bucket to a lower-cost storage class after 30 days and then delete them after 1 year. Which AWS feature should be used to implement this?

A company wants to encrypt data at rest in an Amazon S3 bucket using a customer-managed key in AWS KMS. Which type of encryption should be used?

A US federal agency requires that its AWS workloads meet FedRAMP compliance. Which AWS feature or service provides the necessary compliance documentation and reports for FedRAMP?

A solutions architect needs to encrypt an Amazon EBS volume at rest. Which AWS service should be used to manage the encryption keys?

Keep studying — Design Secure Architectures