Courseiva
← FC0-U71
Full test
hardMultiple ChoiceObjective-mapped

FC0-U71 Cloud storage bucket Practice Question

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Resource": [
        "arn:aws:s3:::my-company-bucket/*"
      ]
    }
  ]
}

An administrator is configuring access to a cloud storage bucket. The policy is applied to a user. Which of the following actions will the user be allowed to perform?

⚠ Common exam trap

Test-takers frequently assume an access policy applied to a user grants all actions on the bucket by default, but cloud storage follows a least-privilege model where only explicitly allowed actions are permitted.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Read and write objects in my-company-bucket

The access policy applied to the user explicitly grants 'Read' and 'Write' actions on the 'my-company-bucket' resource, which correspond to reading and writing objects. This is the only action set permitted by the policy, so the user can read and write objects in the bucket.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    List all objects in my-company-bucket

    Why it's wrong here

    ListBucket permission is missing.

  • ✓

    Read and write objects in my-company-bucket

    Why this is correct

    The policy grants GetObject and PutObject, which allow reading and writing objects.

  • ✗

    Delete objects from my-company-bucket

    Why it's wrong here

    Delete permission is not granted in the policy.

  • ✗

    Change the bucket policy of my-company-bucket

    Why it's wrong here

    Modifying policies requires s3:PutBucketPolicy, which is not allowed.

About these practice questions

One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.