easyMultiple ChoiceObjective-mapped
ISC2 CC Read Permission Practice Question
Exhibit
{
"s3:version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::example-bucket/*"
}
]
}Refer to the exhibit. An access control policy is shown. Which action is permitted by this policy?
⚠ Common exam trap
ISC2 often tests the distinction between read actions and list actions, trapping candidates who assume that reading objects also allows listing them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Read objects from the container.
The policy grants the read permission, which allows reading objects from the specified container. This action corresponds to downloading or retrieving the content of an object, making option D correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Upload objects to the container.
Why it's wrong here
Uploading objects requires write permission, which is not granted by this policy.
- ✗
List all objects in the container.
Why it's wrong here
Listing objects requires list permission, which is not granted by this policy.
- ✗
Delete objects from the container.
Why it's wrong here
Deleting objects requires delete permission, which is not granted by this policy.
- ✓
Read objects from the container.
Why this is correct
Reading objects is allowed by the read permission granted in the policy.
Go deeper
Related to this question
Learn chapter
Access Control Fundamentals
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.