Data Governance And Security →easyMultiple ChoiceObjective-mapped

DS0-001 Data Governance And Security Practice Question

An administrator needs to restrict access to a specific S3 bucket so that only the Finance team can view files. Which configuration is the most effective approach?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Configure an S3 Bucket Policy

IAM policies attached to the specific bucket (Bucket Policies) are the primary control for S3 access management.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Configure an S3 Bucket Policy
Why this is correct
Bucket policies allow for fine-grained resource-based access control.
✗
Update the VPC Route Table
Why it's wrong here
Route tables manage network traffic, not identity-based data access.
✗
Enable Public Access Block
Why it's wrong here
This only prevents public access; it does not authorize specific internal groups.
✗
Enable S3 Versioning
Why it's wrong here
Versioning is for data recovery, not for access control.

Quick reference

AWS S3 Storage Class Comparison

Storage Class	Min Duration	Retrieval	Use Case
S3 Standard	None	Immediate	Frequently accessed data
S3 Standard-IA	30 days	Immediate	Infrequent access, rapid retrieval
S3 One Zone-IA	30 days	Immediate	Non-critical infrequent data
S3 Intelligent-Tiering	None	Immediate–hours	Unknown or changing access patterns
S3 Glacier Instant	90 days	Milliseconds	Archive with instant retrieval
S3 Glacier Flexible	90 days	Minutes–hours	Archive, flexible retrieval
S3 Glacier Deep Archive	180 days	Hours	Long-term compliance archive

About these practice questions

This DS0-001 question is part of Courseiva's 216-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official CompTIA exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Practice tests

Short scored sets — answer, get feedback, read the explanation, move on.

DS0-001 Practice Questions 2 — 50 Questions→DS0-001 Practice Test 1 — 25 Questions→

Practice by domain

Drill one exam section at a time instead of jumping between unrelated topics.

Data Governance And Security Database Planning And Deployment Data Querying And Analysis

Practice by scenario

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Go deeper on a topic

One concept per page — questions, worked explanations, and a short concept guide.

Data Governance And Security practice questions Database Planning And Deployment practice questions DS0-001 fundamentals practice questions

Continue studying

All CompTIA practice questions DS0-001 practice test All DS0-001 questions

This DS0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DS0-001 exam.