A SysOps Administrator Implemented the Following Bucket Policy to Allow

question 578

Multiple Choice

A SysOps Administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket. Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range. How can the Administrator address this issue?

• A) Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket.
• B) Modify the Condition element from the IAM policy to aws:StringEquals instead of aws:SourceIp . element from the IAM policy to aws:StringEquals instead of aws:SourceIp .
• C) Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses.
• D) Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.

---

Definitions:

Cash Dividend

A payment made by a company out of its earnings to shareholders in the form of cash.

Market Price

The current rate for transactions involving a service or asset.

Stock Dividend

A stock dividend is a distribution of additional shares of a company's stock to its shareholders instead of cash dividends.

Paid-in Capital

The amount of money that a company has received from shareholders in exchange for shares of stock.