SOA-C02 Security and Compliance Practice Question

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:ListBucket",
      "Resource": "arn:aws:s3:::example-bucket"
    },
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "Bool": {
          "aws:SecureTransport": "true"
        }
      }
    }
  ]
}

Refer to the exhibit. An IAM policy is attached to a user. Which statement about the user's access is correct?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The user can get objects only over HTTPS.

The GetObject action has a condition requiring SecureTransport to be true, meaning only HTTPS is allowed. Option A is incorrect because HTTP is not allowed for GetObject. Option B is incorrect because ListBucket does not have the SecureTransport condition, so HTTP is allowed for listing objects. Option C is incorrect because listing objects is allowed over HTTP.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The user can get objects over HTTP.
Why it's wrong here
Condition requires HTTPS.
✗
The user can list objects in the bucket over HTTP.
Why it's wrong here
ListBucket action does not have the condition, so HTTP works.
✗
The user can list objects only over HTTPS.
Why it's wrong here
Condition is not on ListBucket.
✓
The user can get objects only over HTTPS.
Why this is correct
GetObject requires SecureTransport true.

Go deeper

SOA-C02 Security and Compliance Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question