AWS Solutions Architect Readiness Test

10 questions, balanced across the exam's topics. Answer each one, then submit for your practice readiness estimate and per-topic breakdown. This is a practice estimate — not a prediction or guarantee of your official exam result.

Question 1

Does deleting encrypted data automatically delete the KMS key?

Only if the object was downloaded once. Yes; deleting any object deletes the shared key. Yes; key deletion is tied to each file's lifecycle expiration. No.

Question 2

Does blocking a domain guarantee all traffic to its IP addresses is blocked?

Yes; direct IP connections are always prevented. No. Only if the domain has a short TTL. Yes; a DNS block is a universal IP firewall rule.

Question 3

Which S3 feature centrally blocks common public-access configurations?

S3 Block Public Access. S3 Select. S3 Lifecycle expiration. S3 Transfer Acceleration.

Question 4

Which Object Lock mode can permitted principals bypass explicitly?

Bucket owner enforced mode. Compliance mode. Glacier retrieval mode. Governance mode.

Question 5

What is the benefit of a recovery account with tightly controlled access?

It makes backups readable without decryption keys. It eliminates the need for identity controls. It preserves a cleaner recovery environment. It automatically removes all malware from any imported data.

Question 6

What does a WAF rate-based rule help control?

The encryption key size of every request. The number of EBS snapshots. Excessive request rates matching its aggregation settings. The allowed number of IAM users.

Question 7

What should an organization use to constrain allowed Regions for member-account workloads?

A Route 53 routing policy. A shared security group in one VPC. An appropriately designed SCP. A cost allocation tag alone.

Question 8

A user can change an object ID in a URL to see another user's invoice. What flaw is present?

An overly short DNS TTL. A lack of S3 storage tiering. Missing object-level authorization. Missing EBS encryption only.

Question 9

How can many accounts' API activity be captured under central governance?

Use an organization trail. Use one local text file on a developer laptop. Disable member-account API logging. Give every account a public log bucket.

Question 10

How should high-severity security findings become actionable?

Suppress them without examining their cause. Leave them unassigned in a dashboard indefinitely. Route them to a tested response workflow. Convert every finding into a public bucket policy.

Unanswered questions count as incorrect. Your answers are graded on the server; no answer key is sent to your browser.

← Back to the AWS Solutions Architect page

About Contact Privacy Policy Terms of Service Refund Policy

Home Exams Simulations WorkTrials GameScope Account