#3 Simple Storage Service (S3)

Question 1

Which type of S3 encryption shows as AES256?

Answer 1

SSE-S3

Question 2

Which S3 Storage class is suitable for data which is easily replaced? (choose the most cost effective)
A. S3 Standard
B. S3 Intelligent-Tiering
C. S3 Standard-IA
D. S3 One Zone-IA
F. S3 Glacier

Answer 2

D. S3 One Zone-IA

Question 3

Which Object class in S3 is ideal for uncertain access and low admin overhead?
A. S3 Glacier
B. S3 One Zone-IA
C. S3 Standard-IA
D. S3 Intelligent-Tiering

Answer 3

D. S3 Intelligent-Tiering

Question 4

What is the cheapest S3 storage class for important data which needs to be retained for long periods and rarely accessed?
A. S3 One Zone-IA
B. S3 Glacier
C. S3 Standard-IA
D. S3 Standard

Answer 4

B. S3 Glacier

Question 5

Which steps are required to allow an S3 bucket to operate as a website?
A. Install the HTTPD server files into the S3
B. Upload web files
C. Set index and error documents
D. Enable static web hosting
E. Enable versioning
F. Disable block public access settings
G. Add a bucket policy
H. Add an identity policy

Answer 5

B. Upload web files
C. Set index and error documents
D. Enable web hosting
F. Disable block public access settings
G. Add a bucket policy

Question 6

What S3 feature allows objects storage classes to be changed and objects deleted automatically?
A. S3 Versioning
B. S3 Intelligent Tiering
C. S3 Lifecycle Policies
D. CRR

Answer 6

C. S3 Lifecycle Policies

Question 7

What is the default limit of the number of S3 buckets in an AWS account?

Answer 7

100

Question 8

How large can an object in S3 be? And what (if any) limits are there on the number of objects in a bucket?

Answer 8

Object Max = % TB
No Object bucket limit

Question 9

What S3 feature needs to be enabled to allow Cross-Region Replication (CRR)?
A. Versioning
B. Static Website
C. Intelligent Tiering
D. Multi-part Upload

Answer 9

A. Versioning

Question 10

What S3 feature can be used to grant external accounts access to an S3 bucket?

A. Identity Policy
B. Resource Policy
C. Trust Policy
D. Permissions Policy

Answer 10

B. Resource Policies

Question 11

Which type of encryption allows for role separation where an S3 Full Admin might not be able to decrypt objects?
A. SSE-C
B. SSE-S3
C. SSE-KMS
D. Client side encryption

Answer 11

C. SSE-KMS

Question 12

Which type of encryption is where AWS perform encryption operations but DON’T hold any keys?
A. SSE-C
B. SSE-S3
C. SSE-KMS
D. Client Side Encryption

Answer 12

A. SSE-C

Question 13

What type of encryption means AWS perform the encryption operations and handle key creation & management?
A. SSE-C
B. Client Side Encryption
C. SSE-S3
D. Multi-Part Encryption

Answer 13

SSE-S3

Question 14

What feature is required to allow CRR to function?
A. Bucket Policy
B. Versioning
C. Encryption
D. Raid

Answer 14

B. Versioning

Question 15

What happens when an object is deleted in a bucket with versioning enabled?
A. The object is deleted
B. The object is moved into a hidden prefix
C. A delete marker is deleted
D. A delete marker is added

Answer 15

D. A delete marker is added