Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

Certified Solutions Architect S3 Storage Classes and Policies Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Certified Solutions Architect S3 Storage Classes and Policies flashcards as text

  1. An architect wants to ensure that all objects in an S3 bucket are only accessible over HTTPS. Which bucket policy condition enforces this?

    Answer: aws:SecureTransport: false with Deny

    Setting a Deny effect with aws:SecureTransport: false blocks all HTTP (non-TLS) requests to the bucket.

  2. Which S3 storage class is most cost-effective for data that is accessed once a quarter and must be retrieved within milliseconds?

    Answer: S3 Glacier Instant Retrieval

    S3 Glacier Instant Retrieval provides millisecond access at a lower storage cost than Standard-IA, ideal for quarterly-access archival data.

  3. A lifecycle policy is configured to expire objects after 365 days. What happens to versioned objects in the bucket?

    Answer: A delete marker is added and previous versions are retained

    In a versioned bucket, an expiration action inserts a delete marker on the current version rather than permanently deleting all versions.

  4. What is the maximum retrieval time for S3 Glacier Deep Archive Standard retrieval?

    Answer: 12 hours

    S3 Glacier Deep Archive Standard retrieval completes within 12 hours, while Bulk retrieval can take up to 48 hours.

  5. An S3 bucket must only accept uploads from a specific VPC endpoint. Which bucket policy condition key enforces this?

    Answer: aws:SourceVpce

    The aws:SourceVpce condition key restricts access to requests originating from a specific VPC endpoint ID.

  6. S3 replication requires versioning to be enabled. What must be true about versioning on both the source and destination buckets?

    Answer: Both source and destination buckets must have versioning enabled

    S3 replication requires versioning to be enabled on both the source and destination buckets before replication rules can be configured.

  7. Which S3 feature allows an object to be restored from Glacier to S3 Standard temporarily for a specified number of days?

    Answer: S3 Restore request

    An S3 Restore request initiates a temporary copy of a Glacier object in S3 Standard for a specified number of days.