Task 5.2: Design and Implement Controls for Data at Rest SCS-C03 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A company wants to protect objects in an Amazon S3 bucket from accidental deletion or overwrites by maintaining multiple versions of each object. Which S3 feature should be enabled?

   • AS3 Object Lock
   • BS3 Lifecycle policies
   • CS3 Replication
   • DS3 Versioning
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A company wants to automatically move objects in an S3 bucket to the S3 Standard-IA storage class after 30 days and then delete them after 365 days. Which S3 feature should be used?

   • AS3 Versioning
   • BS3 Object Lock
   • CS3 Replication
   • DS3 Lifecycle policies
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An administrator accidentally deleted an object in an S3 bucket that has versioning enabled. What is the result of this deletion?

   • AThe object is moved to the S3 Glacier storage class
   • BA delete marker is created, and the object can be recovered by removing the delete marker
   • CThe object is permanently deleted and cannot be recovered
   • DThe object is copied to a backup bucket
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A research team uses an Amazon EFS file system to store shared datasets. Most files are accessed frequently for the first 14 days, then become rarely accessed. The team wants to reduce storage costs by automatically moving rarely accessed files to the Infrequent Access (IA) storage class. Which solution should they implement?

   • ACreate an S3 lifecycle policy to transition the EFS data to S3 Standard-IA.
   • BCreate an EFS lifecycle policy that transitions files not accessed for 14 days to EFS IA.
   • CEnable EFS Intelligent-Tiering to automatically move files to IA.
   • DManually move files to EFS IA after 14 days using a script.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A security engineer needs to verify that a downloaded file matches the original file published by the vendor. The vendor provides a SHA-256 hash value on their website. What should the engineer do to validate the file's integrity?

   • ACompute the SHA-256 hash of the downloaded file and compare it to the provided hash
   • BDecrypt the file using the vendor's public key
   • CCheck the file size and compare it to the size listed on the website
   • DOpen the file in a text editor and look for changes
   Reveal Solution Discussion Select an answer first