1. Home
2. All questions
3. Storage

AWS Certified Solutions Architect study material: Storage

106 questions of the 500 in the AWS Certified Solutions Architect – Associate quiz. Each opens with its answer, the reasoning and where that is written down.

Challenge yourself on this topic → Study as cards

The questions

1. 30. An organization wants to guarantee that no S3 bucket in any member account can be made public. Which two actions achieve this? Choose two.
2. 35. What is the longest a presigned URL created with the AWS CLI can remain valid?
3. 43. Which service discovers sensitive data in S3 and raises a finding when a bucket becomes publicly readable?
4. 70. A data lake team must grant access to particular columns and rows of S3 data queried through Athena and Redshift Spectrum. Which service enforces that?
5. 72. S3 replication is configured across accounts, and the destination account must control who can read the replicas. Which option achieves this?
6. 99. A bucket policy denies PutObject unless the request carries the server-side-encryption header. What unintended effect can this have?
7. 100. What does S3 server-side encryption leave unprotected?
8. 108. Which two conditions must hold before disabling ACLs on an existing S3 bucket? Choose two.
9. 109. Which Security Hub control is satisfied by enabling all four Block Public Access settings on a bucket?
10. 110. A team must host a static website out of S3. How should Block Public Access be handled?
11. 111. How quickly does an account-level Block Public Access setting take effect across AWS Regions?
12. 143. With ACLs disabled on a bucket, which policy types decide access?
13. 144. Which two signs indicate an S3 bucket policy may expose data publicly? Choose two.
14. 145. Which two AWS Config managed rules give a standing detective control over publicly exposed S3 buckets? Choose two.
15. 146. Why does AWS recommend keeping SSE-C disabled unless a workload specifically requires it?
16. 147. A bucket has SSE-C blocked. What does S3 return for a PutObject request that asks for SSE-C?
17. 148. Why does AWS advise emptying rather than deleting a general purpose bucket that is no longer used?
18. 149. Which encryption does S3 apply to objects under SSE-S3?
19. 150. How can an account force every upload to a bucket to use SSE-S3?
20. 156. Which weakness does continuous replication have compared with point-in-time backups?
21. 157. S3 replication is running to a recovery Region and someone deletes an object in the source bucket. What happens to the replica?
22. 158. Which two capabilities does AWS Backup add over per-service backup tools? Choose two.
23. 199. How does S3 versioning protect against an accidental delete?
24. 200. Two clients write the same object key to a versioning-enabled bucket at the same moment. What does S3 do?
25. 223. A team needs replicas that are byte-for-byte identical to the source objects, keeping creation times and version IDs. What does S3 replication offer?
26. 224. What service level does S3 Replication Time Control commit to?
27. 225. A team enables Replication Time Control and expects it to cover a Batch Replication job. What actually happens?
28. 246. Why is a daily automatic backup of an FSx for Windows file system file-system-consistent?
29. 247. A multipart upload loses one part to a network error. What must be retransmitted?
30. 248. Across what scope is EBS snapshot data replicated?
31. 249. Who is responsible for backing up the data on an EBS volume?
32. 250. How can a team follow the progress and status of EBS snapshots programmatically?
33. 259. What does versioning in the destination bucket add to an S3 Cross-Region Replication strategy?
34. 280. Two buckets in the same AWS Region must be kept in sync automatically. Which feature does this?
35. 281. An object is uploaded to S3 without naming a storage class. Where does it land?
36. 282. What actually differs between the S3 storage classes?
37. 283. Which two statements about S3 One Zone-IA are correct? Choose two.
38. 284. Which storage class does AWS recommend for a primary copy of data that could not be recreated but is read rarely?
39. 285. Into which S3 Intelligent-Tiering tier does a newly uploaded object go?
40. 286. After how many consecutive days without access does Intelligent-Tiering move an object to Infrequent Access?
41. 287. An object in S3 Intelligent-Tiering has gone 90 consecutive days without being read. Which tier does it move to?
42. 288. Which two statements about the optional Intelligent-Tiering archive tiers are correct? Choose two.
43. 289. What happens to an object smaller than 128 KB in S3 Intelligent-Tiering?
44. 290. How does the Archive Instant Access tier differ from the Archive Access tier?
45. 291. Which durability figure is S3 Intelligent-Tiering designed for?
46. 292. Why does AWS advise against Reduced Redundancy Storage?
47. 293. How is S3 Express One Zone's data stored?
48. 294. Which two actions can an S3 Lifecycle configuration perform? Choose two.
49. 295. A bucket policy denies every action to every principal. What happens to the bucket's lifecycle rules?
50. 296. A lifecycle rule expiring objects after 30 days is added to a bucket that already holds older objects. What happens?
51. 297. Which two EBS volume families are SSD-backed? Choose two.
52. 298. For which kind of workload are SSD-backed EBS volumes designed?
53. 299. Which EBS volume type is rated for five nines of durability?
54. 300. What is the maximum size of a gp3 EBS volume?
55. 301. A database volume must be attached to several EC2 instances at once. Which EBS family supports this?
56. 302. Which two workloads does AWS name as a good fit for General Purpose SSD volumes? Choose two.
57. 303. What does an EBS snapshot store after the first one is taken?
58. 304. Where do EBS snapshots live, and how are they managed?
59. 305. A team creates a new EBS volume from a snapshot. What state does the volume start in?
60. 306. Which protocol do clients use to reach an Amazon FSx for Windows File Server file system?
61. 307. Which two settings are chosen when creating an FSx for Windows file system, and can be changed later? Choose two.
62. 308. What does AWS handle on a customer's behalf for FSx for Windows File Server?
63. 309. An existing Linux application must run unchanged against a high-performance shared file system. Which property of FSx for Lustre makes that possible?
64. 310. Which two gateway types does AWS Storage Gateway offer? Choose two.
65. 311. An on-premises site needs access to Windows file shares that live in the cloud. Which gateway type fits?
66. 312. What distinguishes the two Volume Gateway architectures?
67. 313. Which two on-premises sources can AWS DataSync read from? Choose two.
68. 314. Which two AWS storage services can DataSync move data into? Choose two.
69. 315. At what object size does AWS treat multipart upload as best practice?
70. 316. An application starts a multipart upload and then abandons it. What happens to the upload?
71. 317. Which capability lets an application begin uploading an object before its final size is known?
72. 318. What are the three steps of a multipart upload?
73. 319. Which two S3 storage classes hold objects that cannot be read in real time? Choose two.
74. 320. How is an object in S3 Glacier Deep Archive made readable?
75. 321. A team restores an object from S3 Glacier Flexible Retrieval and wants a permanent copy in S3 Standard. What must they do?
76. 322. How does restoring from an Intelligent-Tiering archive tier differ from restoring from S3 Glacier?
77. 323. Which mechanism restores many archived S3 objects in one operation?
78. 324. Which two statements about S3 live replication are correct? Choose two.
79. 325. A bucket must have its pre-existing objects copied to a new destination bucket. Which feature does this?
80. 326. Can S3 replication write objects into a different storage class at the destination?
81. 327. What are the three possible versioning states of an S3 bucket?
82. 328. What happens when an object is overwritten in a versioning-enabled bucket?
83. 329. How large can a single record delivered to an Amazon Data Firehose stream be?
84. 330. Which two services can query data catalogued by AWS Glue straight away? Choose two.
85. 331. How many general purpose buckets may an AWS account create by default?
86. 332. What is the account regional namespace for S3 buckets?
87. 333. Since January 2023, what encryption is applied to new object uploads to S3?
88. 334. What does S3 Versioning let an owner do with an object?
89. 335. Which two arrangements does S3 replication support? Choose two.
90. 372. How does S3 Transfer Acceleration speed up a long-distance upload?
91. 448. An EBS volume is not delivering the IOPS it was provisioned for. What should be checked first?
92. 449. What maximum IOPS does an io2 Block Express volume reach?
93. 450. Which EBS volume family does AWS recommend for a workload that must sustain more than 16,000 IOPS?
94. 451. Which two choices shape the performance of an Amazon EFS file system? Choose two.
95. 452. Why does AWS recommend General Purpose over Max I/O performance mode for EFS?
96. 453. Which EFS throughput mode reaches the highest IOPS on a Regional file system?
97. 454. Which two workloads does AWS name as suiting FSx for Lustre? Choose two.
98. 455. What performance does FSx for Lustre deliver?
99. 457. Which two situations make S3 Transfer Acceleration worth its cost? Choose two.
100. 482. What does S3 Intelligent-Tiering charge that the other storage classes do not?
101. 483. Which two billing rules apply to the S3 infrequent-access storage classes? Choose two.
102. 484. A team uploads data to S3 Standard and wants it to become cheaper as it ages. What is the usual approach?
103. 485. Which two costs can an S3 Lifecycle configuration incur? Choose two.
104. 486. Why does keeping three versions of an object in a versioned bucket cost as much as three objects?
105. 487. Which two charges apply while an object restored from S3 Glacier sits in the bucket? Choose two.
106. 488. An application restores an object that has already been restored. How is that request billed?