A team is about to put customer documents into Amazon S3 for the first time. Which TWO statements are true and should shape the design?
AWS Certified Cloud Practitioner (CLF-C02), objective 3. Cloud technology and services medium
Machine-checked — no person has signed for it. This question was read against the source cited below by an automated pass, which found no contradiction. That is a weaker claim than it sounds: the same kind of process wrote the question, so it can confirm its own mistake.
Treat it as a good draft rather than as settled fact, and read the source below before you rely on it. It is not used in mock exams here — only questions a person has signed for are.
The options
Choose 2.
Correct Buckets and the objects in them are private by default, and access has to be granted deliberately
Correct. Nothing is readable by the public until someone configures it to be, which is why an exposed bucket is always a customer configuration decision rather than an AWS failure.
Correct Enabling versioning allows an object that was overwritten or deleted by mistake to be recovered
Correct. With versioning on, an overwrite creates a new version and a delete adds a marker, so the previous content is still there to restore. It is the standard defence against a bad script.
Not correct Bucket capacity must be provisioned in advance, in the way an EBS volume's size is chosen
Wrong. You never size a bucket. Storage grows as you write and you are billed for what is stored, which is one of the clearest examples of paying for consumption rather than capacity.
Not correct Objects are stored in a single Availability Zone chosen when the bucket is created
Wrong. A bucket belongs to a Region, and apart from the One Zone-Infrequent Access class, S3 stores objects redundantly across several Availability Zones in that Region automatically.
Not correct Moving an object to a cheaper storage class means downloading it and uploading it again
Wrong. A lifecycle rule changes an object's storage class in place on a schedule you define, and the class can also be changed directly. No data has to leave S3.
Why
The four properties worth carrying into every S3 question: capacity is elastic and billed by what is stored; objects are private until you say otherwise; durability across Availability Zones is AWS's job while who may read the object is yours; and lifecycle rules move objects between classes in place. That third one is the shared responsibility model in miniature — AWS has never lost the object, but AWS also cannot know that you did not mean to share it.
Where this comes from
- Cited
- AWS exam guide task statement 3.6
Practise this
Reading one question is not practice. The trainer will draw a set from objective 3 and space the ones you get wrong.
Practise AWS Certified Cloud Practitioner (CLF-C02)
More questions on this objective
- A team builds the same stack — a load balancer, three EC2 instances and a database — by clicking through the console once for dev, once for test and once for production. The three environments have quietly drifted apart and a bug that only appears in production took a week to trace to a missing setting. They want the stack described once, reviewed in a pull request, and applied identically to each environment. Which service does that? machine-checked
- A Python reporting job runs unattended every night. Inside its own logic it needs to list objects in an S3 bucket, read a few of them, and write a summary object back, handling failures with the program's existing retry and logging code. What is the appropriate way for that program to call AWS? machine-checked
- A small team has a Java web application and no operations staff. They want to hand AWS the application package and have it provision the instances, the load balancer and the scaling policy, while keeping the ability to inspect and adjust those resources later if they need to. Which service fits? machine-checked
- A manufacturer keeps its plant-floor control application on servers inside the factory, because production must continue when the internet link drops. Its reporting and analytics run in AWS and read the same production data. Which TWO statements about this arrangement are accurate? machine-checked
- An internal application runs on a single EC2 instance in one Availability Zone. During a power event in that Availability Zone the application was unreachable for four hours. The team wants the cheapest change that keeps it serving through the same kind of event, without moving to another Region. What should they do? machine-checked
- A German insurer is told by its regulator that customer records must remain within the European Union. Four candidate Regions can all run every service the workload needs, and one of them is noticeably cheaper per instance-hour. Which consideration settles the choice of Region first? machine-checked