AWS Cloud Storage: S3 Management & Security Quiz

Which service allows mass operations across S3 objects like copy and tagging?

• S3 Inventory

• S3 Batch Operations

• IAM

• S3 Object Lock

Answer explanation

S3 Batch Operations is the service designed for mass operations on S3 objects, such as copying and tagging multiple objects at once, making it the correct choice for this question.

What must be enabled before using S3 Object Lock?

• Cross-region replication

• Versioning

• Encryption

• Lifecycle policies

Answer explanation

Before using S3 Object Lock, versioning must be enabled. This feature allows you to retain multiple versions of an object, which is essential for the Object Lock functionality to work effectively.

Which mode of S3 Object Lock disallows even Root account deletes?

• Compliance Mode

• Governance Mode

• Lifecycle Mode

• Audit Mode

Answer explanation

Compliance Mode in S3 Object Lock prevents even the Root account from deleting objects, ensuring strict data retention. In contrast, Governance Mode allows certain users to override the lock, making Compliance Mode the correct choice.

Which S3 replication feature allows cross-region backups?

• Versioning

• Cross-Region Replication (CRR)

• Intelligent-Tiering

• S3 File Sync

Answer explanation

Cross-Region Replication (CRR) is the S3 feature that enables automatic, asynchronous copying of objects across different AWS regions, providing cross-region backups. This makes CRR the correct choice for the question.

Which service generates CSV files of current S3 object inventory?

• S3 Batch Ops

• CloudWatch

• S3 Inventory

• CloudTrail

Answer explanation

S3 Inventory is the service that generates CSV files containing a list of current S3 objects and their metadata. This helps in managing and auditing S3 storage effectively.

Which tool analyses object access patterns for tiering optimization?

• S3 Storage Class Analysis

• S3 Batch Ops

• CloudTrail

• S3 Lifecycle

Answer explanation

S3 Storage Class Analysis is the tool specifically designed to analyze object access patterns, helping optimize storage tiering by identifying which objects can be moved to lower-cost storage classes based on their usage.

How many tags can be added to each S3 object?

• 5

• 10

• 50

• 25

Answer explanation

Each S3 object can have a maximum of 10 tags. This allows for effective organization and management of objects within Amazon S3, making 10 the correct answer.

Which security feature prevents accidental bucket exposure to the public?

• S3 Block Public Access

• ACLs

• IAM Policies

• Versioning

Answer explanation

S3 Block Public Access is a security feature that prevents accidental exposure of S3 buckets to the public by blocking public access at the account or bucket level, ensuring that sensitive data remains secure.

Which S3 security option is the weakest and only kept for backward compatibility?

• Bucket policies

• IAM trust policies

• ACLs

• S3 block public access

Answer explanation

ACLs (Access Control Lists) are considered the weakest S3 security option and are primarily maintained for backward compatibility, as they offer less granularity and control compared to other options like bucket policies and IAM trust policies.

Which security control allows rules directly attached to buckets, including anonymous access?

• S3 Object Lock

• IAM Role

• Bucket Policy

• ACL

Answer explanation

A Bucket Policy allows you to define rules directly on S3 buckets, including permissions for anonymous access. This makes it the correct choice for managing access control at the bucket level.