SAP-C02 Question 272

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  When the IgnorePublicAcls option is set to TRUE within the Amazon S3 Block Public Access feature, Amazon S3 will stop evaluating any public Access Control Lists (ACLs) when authorizing a request. This effectively overrides and blocks any public access that may be granted by an ACL, without changing the ACLs

• Chose A1

  Option D impacts the application's normal workflow. It will block access to the objects from the internet irrespective of whether the user is authorised or not.

• Chose D1

  Not C due to the following: C. Script for Private ACL (Potentially Disruptive): Setting a private ACL on all objects might disrupt existing download mechanisms that rely on signed URLs.