easyMultiple ChoiceObjective-mapped
FC0-U71 Access Control Policy Practice Question
Exhibit
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::example-bucket/*"
}
]
}Refer to the exhibit. This JSON policy is associated with a user. Which of the following actions is the user permitted to perform?
⚠ Common exam trap
Watch out — candidates often assume that being able to download files implies the ability to list or upload, but access control policies require explicit permissions for each distinct action, and the absence of list or write actions means those actions are denied by default.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Download files from example-bucket
The JSON policy grants the 'read object' action on the example-bucket storage location, which allows the user to retrieve (download) objects from that bucket. The Effect is set to 'Allow', so the policy explicitly permits this action. No other actions are listed in the Statement, so only downloads are permitted.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Download files from example-bucket
Why this is correct
Correct. The policy allows the GetObject action, which permits downloading objects from the bucket.
- ✗
Upload files to example-bucket
Why it's wrong here
Incorrect. The policy does not include a PutObject action, so uploading is not permitted.
- ✗
Delete files from example-bucket
Why it's wrong here
Incorrect. The policy does not include a DeleteObject action, so deletion is not permitted.
- ✗
List the contents of example-bucket
Why it's wrong here
Incorrect. The policy does not include a ListBucket action, so listing contents is not permitted.
Go deeper
Related to this question
About these practice questions
One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.