MLS-C01 Exploratory Data Analysis Practice Question

Exhibit

Refer to the exhibit.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject"
            ],
            "Resource": "arn:aws:s3:::data-bucket/*",
            "Condition": {
                "StringEquals": {
                    "s3:x-amz-server-side-encryption": "AES256"
                }
            }
        }
    ]
}

A data scientist is trying to upload a CSV file to an S3 bucket using the AWS CLI without specifying server-side encryption. The upload fails with an AccessDenied error. Based on the bucket policy exhibit, what is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The upload request did not specify the required server-side encryption.

The bucket policy requires that all PutObject requests include the x-amz-server-side-encryption header with value 'AES256'. Since the data scientist did not specify any encryption, the request was denied with AccessDenied. Option B is wrong because the error is AccessDenied, not NoSuchBucket. Option C is wrong because the data scientist may have permissions but the condition on encryption is not met. Option D is wrong because region mismatch would give a different error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The upload request did not specify the required server-side encryption.
Why this is correct
The condition requires s3:x-amz-server-side-encryption to be AES256.
✗
The bucket does not exist.
Why it's wrong here
The error is AccessDenied, not NoSuchBucket.
✗
The data scientist does not have any permissions to the bucket.
Why it's wrong here
The policy allows the actions, but with a condition.
✗
The data scientist used the wrong AWS region.
Why it's wrong here
Region mismatch would cause a different error.

Quick reference

AWS S3 Storage Class Comparison

Storage Class	Min Duration	Retrieval	Use Case
S3 Standard	None	Immediate	Frequently accessed data
S3 Standard-IA	30 days	Immediate	Infrequent access, rapid retrieval
S3 One Zone-IA	30 days	Immediate	Non-critical infrequent data
S3 Intelligent-Tiering	None	Immediate–hours	Unknown or changing access patterns
S3 Glacier Instant	90 days	Milliseconds	Archive with instant retrieval
S3 Glacier Flexible	90 days	Minutes–hours	Archive, flexible retrieval
S3 Glacier Deep Archive	180 days	Hours	Long-term compliance archive

Go deeper

Timed practice sets

Quick scored rounds with instant marking and a written explanation per question.

Free MLS-C01 Practice Test 1 — 30 Questions→MLS-C01 Exam Simulation 1 — 100 Questions→

Domain-focused practice

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Exploratory Data Analysis Machine Learning Implementation and Operations Data Engineering

Practice by scenario

Pick a question style and work only that format until it feels routine.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

Exploratory Data Analysis practice questions MLS-C01 fundamentals practice questions Data Engineering practice questions

Where to go next

Study guide All MLS-C01 questions Exam domains

This MLS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLS-C01 exam.

MLS-C01 Exploratory Data Analysis Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

AWS S3 Storage Class Comparison

Related to this question