AWS Certified Solutions Architect S3 Storage Classes and Policies 3

Question 1

S3 Intelligent-Tiering automatically moves objects to which tier after 90 consecutive days without access?

Accepted Answer

Archive Instant Access tier

Answer

After 90 days without access, Intelligent-Tiering automatically moves objects to the Archive Instant Access tier, which offers the same millisecond retrieval as Glacier Instant Retrieval.

Question 2

Which S3 bucket policy element explicitly denies all actions on objects unless they are uploaded with server-side encryption?

Accepted Answer

Condition with s3:x-amz-server-side-encryption and a Deny effect

Answer

A bucket policy with a Deny effect and the condition s3:x-amz-server-side-encryption ensures unencrypted PutObject requests are rejected.

Question 3

A company wants archived S3 objects to be permanently undeletable for 7 years for regulatory compliance. Which feature should be configured?

Accepted Answer

S3 Object Lock in Compliance mode

Answer

S3 Object Lock in Compliance mode prevents any user, including the root account, from deleting or overwriting objects until the retention period expires.

Question 4

When using S3 Cross-Region Replication (CRR), what is replicated by default?

Accepted Answer

Only new objects uploaded after replication is enabled

Answer

CRR only replicates new objects added after replication is configured; existing objects must be replicated separately using S3 Batch Replication.

Question 5

Which S3 Glacier retrieval option provides access to archived data within 1-5 minutes?

Accepted Answer

Expedited

Answer

Expedited retrieval for S3 Glacier Flexible Retrieval provides access within 1-5 minutes, though it costs more than Standard or Bulk options.

AWS Practice Test

AWS Practice Test

AWS Certified Solutions Architect S3 Storage Classes and Policies 3