Sample questions
Aws Storage S3 EbsDifficulty 1
Which S3 storage class is the general-purpose choice for frequently accessed data that needs low-latency access?
- aS3 Glacier Flexible Retrieval
- bS3 Standard✓
- cS3 Standard-IA
- dS3 Glacier Deep Archive
Explanation:S3 Standard is the general-purpose class for frequently accessed data and provides millisecond access without a restore step. The other options target infrequent or archival access patterns.
Aws Storage S3 EbsDifficulty 1
A lifecycle rule transitions objects from S3 Standard to S3 Standard-IA after 30 days, then to S3 Glacier after 90 days. What is the purpose of this configuration?
- aTo make the objects publicly readable after the transition
- bTo automatically delete the objects after 90 days
- cTo reduce storage cost over time as objects become less frequently accessed✓
- dTo increase the durability of the objects
Explanation:Lifecycle transitions move objects to cheaper storage classes as they age and are accessed less often, reducing cost without deleting data. Durability (11 nines) is the same across these classes; the rule does not change object permissions or delete anything.
Aws Storage S3 EbsDifficulty 1
AWS advertises S3 Standard as providing 99.999999999% (11 nines) of what property?
- aDurability — the probability that an object is not lost over a year✓
- bAvailability — the percentage of time the service responds to requests
- cConsistency — the guarantee that reads reflect the latest write
- dThroughput — the guaranteed transfer speed per object
Explanation:The 11 nines figure describes durability: the extremely low statistical probability of losing an object due to underlying infrastructure failure, because S3 redundantly stores data across multiple facilities. Availability (uptime) is a separate, lower published number (e.g. 99.99% for Standard).
Aws Storage S3 EbsDifficulty 1
What does enabling versioning on an S3 bucket primarily provide?
- aAutomatic encryption of all new objects
- bFaster retrieval for frequently accessed objects
- cAutomatic replication to another AWS region
- dRecovery of earlier object versions after overwrite or deletion✓
Explanation:Versioning keeps every prior copy of an object whenever it is overwritten or deleted (deletes become a delete marker rather than removing data), letting you recover previous states. It does not by itself encrypt, speed up access, or replicate cross-region.
Aws Storage S3 EbsDifficulty 1
What is the main purpose of an S3 presigned URL?
- aTo permanently make an S3 object publicly readable by anyone
- bTo encrypt an object with a customer-managed KMS key
- cTime-limited access to a private object without making it public✓
- dTo move an object between storage classes
Explanation:A presigned URL is generated using a signer's credentials and grants time-limited access (upload or download) to a specific object, without requiring the bucket or object to be made public. It expires after a set duration and doesn't touch storage class or bucket-wide permissions.
Aws Storage S3 EbsDifficulty 1
Which statement correctly distinguishes an S3 bucket policy from an IAM identity-based policy?
- aA bucket policy can only allow access, never deny it
- bIt is a resource-based policy attached to the bucket✓
- cAn IAM identity-based policy can only be used with EC2, not S3
- dA bucket policy and an IAM policy cannot both apply to the same request
Explanation:A bucket policy is a resource-based policy attached directly to the S3 bucket, controlling who (including other accounts) can access it. An IAM identity-based policy is attached to a user/role/group instead. Both can apply to the same request simultaneously, and each can include explicit deny statements.