Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

Certified Solutions Architect S3 Storage Classes and Policies Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Certified Solutions Architect S3 Storage Classes and Policies flashcards as text

  1. S3 Intelligent-Tiering automatically moves objects to which tier after 90 consecutive days without access?

    Answer: Archive Instant Access tier

    After 90 days without access, Intelligent-Tiering automatically moves objects to the Archive Instant Access tier, which offers the same millisecond retrieval as Glacier Instant Retrieval.

  2. Which S3 bucket policy element explicitly denies all actions on objects unless they are uploaded with server-side encryption?

    Answer: Condition with s3:x-amz-server-side-encryption and a Deny effect

    A bucket policy with a Deny effect and the condition s3:x-amz-server-side-encryption ensures unencrypted PutObject requests are rejected.

  3. A company wants archived S3 objects to be permanently undeletable for 7 years for regulatory compliance. Which feature should be configured?

    Answer: S3 Object Lock in Compliance mode

    S3 Object Lock in Compliance mode prevents any user, including the root account, from deleting or overwriting objects until the retention period expires.

  4. When using S3 Cross-Region Replication (CRR), what is replicated by default?

    Answer: Only new objects uploaded after replication is enabled

    CRR only replicates new objects added after replication is configured; existing objects must be replicated separately using S3 Batch Replication.

  5. Which S3 Glacier retrieval option provides access to archived data within 1-5 minutes?

    Answer: Expedited

    Expedited retrieval for S3 Glacier Flexible Retrieval provides access within 1-5 minutes, though it costs more than Standard or Bulk options.

  6. A bucket policy must allow cross-account access to objects for a specific AWS account. Which Principal format is correct?

    Answer: Principal: {AWS: 'arn:aws:iam::123456789012:root'}

    Cross-account access is granted by specifying the external account's root ARN (arn:aws:iam::ACCOUNT_ID:root) in the bucket policy Principal.

  7. What happens to S3 Intelligent-Tiering monitoring and automation fees for objects smaller than 128 KB?

    Answer: They are not charged

    Objects smaller than 128 KB in Intelligent-Tiering are not charged the monthly monitoring and automation fee, but they remain stored in the Frequent Access tier.