💾 Amazon Elastic Block Store (EBS) - SAA-C03 Practice Questions

EBS provides block-level storage volumes. Compare gp3, gp2, io2, st1, sc1 volume types, understand snapshots, encryption, and multi-attach.

15Questions Available
3Exam Domains

Practice EBS Questions Now

Start a timed practice session focusing on Amazon Elastic Block Store (EBS) topics from the SAA-C03 question bank.

Start SAA-C03 Practice Quiz →

How EBS Is Really Tested in SAA-C03

EBS questions are usually performance-versus-cost decisions framed around workload behavior. You are expected to match volume type and performance settings to IOPS and throughput needs.

SAA-C03 also tests durability workflows. Snapshots, encryption, and lifecycle practices matter when questions include backup objectives or disaster recovery requirements.

The best answers avoid both overprovisioning and underprovisioning by selecting volume classes aligned to actual access patterns.

EBS design decisions that repeatedly appear in SAA-C03

Decision PointOption AOption BExam Takeaway
General-purpose block storage choicegp3 with independent IOPS and throughput tuningLegacy gp2 with burst-credit behaviorModern cost/performance optimization scenarios often favor gp3 for predictability and flexibility.
Durability and restore strategyRegular EBS snapshots and tested restore workflowsNo snapshot strategy and rely on instance uptimeProduction recovery requirements usually imply snapshot policy and restore validation.
Workload performance profileProvisioned IOPS classes for sustained high-I/O databasesGeneral-purpose volumes for heavy sustained transactional loadIf sustained latency-sensitive I/O is explicit, provisioned IOPS is typically the expected answer.

Transactional workload on EC2 with recovery objectives

A business-critical application on EC2 needs stable disk performance and fast restoration from accidental data corruption.

  • Choose an EBS volume class aligned with sustained I/O demand.
  • Enable encryption and enforce key governance requirements.
  • Automate frequent snapshots with retention controls.
  • Document and test restore runbooks to meet recovery targets.

Common Exam Trap: Selecting the cheapest volume class without validating throughput and IOPS requirements often fails performance objectives.

SAA-C03 EBS Question Bank (15 Questions)

Browse all 15 practice questions covering Amazon Elastic Block Store (EBS) for the SAA-C03 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Design Secure Architectures

    A team is using EBS gp3 volumes for general workloads and wants to reduce cost while maintaining required IOPS and throughput. Which gp3 configuration minimizes cost?

    AUse default gp3 settings and increase instance size.
    BRight-size gp3 IOPS and throughput independently from storage size to pay only for the IOPS and throughput you need while keeping storage capacity modest, and delete unused volumes and snapshots.
    CUse io2 for all workloads.
    DUse magnetic volumes.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  2. Question 2Design High-Performing Architectures

    An application runs on an EC2 instance and requires a storage volume that supports 20,000 IOPS and substantial throughput for a high-performance database. The database administrator wants to be able to adjust the IOPS independently of the volume size to save costs on storage capacity. Which EBS volume type should be selected?

    AGeneral Purpose SSD (gp3)
    BGeneral Purpose SSD (gp2)
    CProvisioned IOPS SSD (io2)
    DThroughput Optimized HDD (st1)

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  3. Question 3Design Secure Architectures

    An attacker obtained temporary credentials that allowed `DescribeInstances` and `DescribeVolumes` but should not be able to copy EBS snapshots. Which control prevents snapshot copying even if the IAM role has `ec2:CreateSnapshot`?

    AUse a KMS key with a key policy that requires creation requests to include the principal in a key policy whitelist; only allow `kms:CreateGrant` for approved roles and restrict `ec2:CopySnapshot` via condition that checks `kms:ViaService`.
    BRemove EBS permissions from the role.
    CDisable EBS entirely in the account.
    DRely on CloudTrail to detect misuse after it happens.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  4. Question 4Design Resilient Architectures

    A database server uses a 2 TB EBS volume and requires point-in-time recovery capability with RPO (Recovery Point Objective) of 4 hours. Manual snapshots are not reliable due to human error. Which backup strategy meets the RPO requirement automatically?

    ACreate manual snapshots daily using the AWS CLI in a cron job.
    BEnable EBS-optimized instances for automatic snapshot creation.
    CUse AWS Backup to create EBS snapshots every 4 hours with automated lifecycle management.
    DConfigure CloudWatch Events to trigger Lambda functions for snapshot creation every 4 hours.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  5. Question 5Design Resilient Architectures

    A database requires high IOPS performance and fault tolerance against volume failures. The application can handle block-level redundancy management. Which EBS configuration provides both performance and resilience?

    ASingle io2 Block Express volume with maximum IOPS provisioning.
    BRAID 0 (striping) across multiple gp3 volumes for performance only.
    CRAID 1 (mirroring) across multiple io2 volumes for redundancy only.
    DRAID 10 (striped mirroring) combining RAID 0 and RAID 1 across multiple volumes.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  6. Question 6Design High-Performing Architectures

    A database workload requires consistent 25,000 IOPS with low latency for transaction processing. Cost optimization is secondary to performance requirements. Which EBS volume type provides the required performance?

    AGeneral Purpose SSD (gp3) with maximum IOPS provisioning.
    BProvisioned IOPS SSD (io1) with 25,000 IOPS configured.
    CProvisioned IOPS SSD (io2) with 25,000 IOPS configured.
    DThroughput Optimized HDD (st1) with multiple volumes in RAID 0.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  7. Question 7Design High-Performing Architectures

    A CTO demands that all EBS volumes in the production account must be encrypted. Any non-compliant volume should be detected and automatically remediated (snapshot taken, volume deleted, or encryption enabled if possible). Which service handles this?

    AAWS Systems Manager Compliance
    BAWS Config with a managed rule and a remediation action.
    CCloudWatch Alarms checking the `VolumeStatus`.
    DAWS Trusted Advisor.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  8. Question 8Design Secure Architectures

    An application needs predictable, low-latency I/O for database storage at scale. Which EBS configuration is most appropriate?

    AUse gp2 volumes and rely on burst credits.
    BUse io2 or io2 Block Express volumes with provisioned IOPS (PIOPS) sized to required IOPS and throughput, and place in appropriate instance types that support required EBS bandwidth.
    CUse instance-store only volumes for persistence.
    DUse EFS General Purpose NFS for high IOPS.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  9. Question 9Design Secure Architectures

    A backup strategy uses EBS snapshots and RDS snapshots. The company wants to minimize snapshot storage costs while preserving the ability to restore data to specific points in time within 30 days. Which approach is most cost-effective?

    AKeep all snapshots forever.
    BImplement lifecycle policies to expire older snapshots beyond 30 days, consolidate incremental snapshots when possible, and use cross-account snapshot copy for offsite backups only when required.
    CCopy snapshots to Glacier.
    DKeep hourly AMIs for all instances.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  10. Question 10Design Secure Architectures

    A data pipeline frequently transfers large volumes of data from on-premises to S3 in a single region. Data transfer costs have become significant. How can you reduce transfer costs while preserving throughput?

    AUse S3 Transfer Acceleration for uploads from on-premises and DynamoDB for storage.
    BUse AWS Direct Connect or use an Amazon S3 Transfer Acceleration only; consider compressing data during transfer and using multipart uploads. Prefer Direct Connect when data volumes are large and sustained to reduce egress costs.
    CShip hard drives weekly.
    DUse Internet-only uploads via NAT gateways.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  11. Question 11Mixed

    You need to ensure that all EBS volumes attached to EC2 instances in your VPC are encrypted. What is the most efficient way to enforce this?

    AWrite a script to check for unencrypted volumes daily.
    BEnable EBS encryption by default for your AWS account and region.
    CUse an IAM policy to prevent the CreateVolume API call without an encryption parameter.
    DUse AWS Config to monitor for non-compliant resources.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  12. Question 12Mixed

    To ensure business continuity, a company needs to automatically backup all EBS volumes across multiple accounts. Which service provides centralized backup management?

    AAWS Storage Gateway
    BAWS Backup
    CAmazon Data Lifecycle Manager
    DAWS Systems Manager

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  13. Question 13Mixed

    A company has several unused EBS volumes attached to stopped EC2 instances. What should be done to reduce costs?

    AEncrypt the volumes.
    BDelete the volumes.
    CTake a snapshot and then delete the volumes.
    DChange the volume type to st1.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  14. Question 14Design Secure Architectures

    A solutions architect must design a solution that prevents launching unencrypted EBS volumes across all accounts. Which solution enforces this requirement?

    AEnable EBS encryption by default
    BUse AWS Config rules
    CUse Service Control Policies (SCPs)
    DUse IAM policies

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  15. Question 15Design Secure Architectures

    A company is using a Customer Managed Key (CMK) in AWS KMS to encrypt EBS volumes. A separate audit team needs to be able to view the key metadata and audit usage logs but must strictly be prevented from using the key for cryptographic operations (encrypt/decrypt). How should the Key Policy be configured?

    ACreate a separate IAM policy for the auditors with `kms:Describe*` and `kms:List*`. Deny `kms:Encrypt` and `kms:Decrypt`.
    BIn the KMS Key Policy, add a statement allowing the audit team principal to perform `kms:DescribeKey`, `kms:GetKeyPolicy`, and `kms:ListGrants`. Do not add them to the statement allowing cryptographic operations.
    CUse a Grant to allow the audit team temporary access to describe the key.
    DEnable CloudTrail and give the audit team read-access to the CloudTrail S3 bucket only.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz

Key EBS Concepts for SAA-C03

ebsvolumesnapshotgp3gp2io2iopsthroughputblock storage

SAA-C03 EBS Exam Tips

Amazon Elastic Block Store (EBS) questions in SAA-C03 are typically scenario-based. Focus on architecture trade-offs, resilience, and secure-by-default design choices. Priority concepts: ebs, volume, snapshot, gp3, gp2, io2.

What SAA-C03 Expects

  • Anchor your answer in choose the most reliable and cost-aware architecture pattern, not just a feature match.
  • EBS scenarios for SAA-C03 are frequently mapped to Domain 2 (26%), Domain 3 (24%), Domain 4 (20%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where EBS interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.

High-Value EBS Concepts

  • Know the core EBS building blocks cold: ebs, volume, snapshot, gp3.
  • Review the edge-case features and limits for gp2, io2; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how EBS pairs with EC2, EFS, S3 in real deployment patterns.
  • For SAA-C03, explain why the chosen EBS design meets reliability, security, and cost expectations better than the alternatives.

Common SAA-C03 Traps

  • Watch for answers that solve today's issue but do not scale across multiple AZs.
  • Questions in Design Resilient Architectures often include distractors that look correct for EBS but violate least-privilege, durability, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two EBS implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Design Resilient Architectures (26%) outcomes for SAA-C03?
  • Can you explain security and access boundaries for EBS without relying on default-open assumptions?
  • Can you describe how EBS integrates with EC2 and EFS during failure, scaling, and monitoring events?

Exam Domains Covering EBS

Related Resources

More SAA-C03 Study Resources