easyMultiple ChoiceObjective-mapped
CCSP Practice Question: A security analyst notices that a cloud storage…
A security analyst notices that a cloud storage bucket contains objects with public read access. The organization's policy prohibits public access. What is the most efficient way to remediate this issue across all objects in the bucket?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Apply a bucket policy that denies public access and update the bucket ACL to block public access
Applying a bucket policy that denies public access and updating the bucket ACL to block public access will override any object-level public ACLs, providing the most efficient remediation across all objects. Option A is unnecessarily disruptive and inefficient. Option B may work but is not the most efficient. Option D is inefficient as it requires manual updates to each object.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Delete the bucket and recreate it
Why it's wrong here
Deleting the bucket is overly destructive and unnecessary.
- ✗
Use a third-party tool to scan and fix
Why it's wrong here
Third-party tools are not always efficient and may introduce extra complexity.
- ✓
Apply a bucket policy that denies public access and update the bucket ACL to block public access
Why this is correct
Bucket-level policies and ACLs override object-level permissions, efficiently blocking public access.
- ✗
Manually update each object's ACL
Why it's wrong here
Manual updates are time-consuming and error-prone; not efficient for many objects.
Visual reference
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.