Amazon Discussions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Go to Exam

Exam AWS-SysOps topic 1 question 27 discussion

Exam question from Amazon's AWS-SysOps

Question #: 27
Topic #: 1

[All AWS-SysOps Questions]

Which of the following statements about this S3 bucket policy is true?

A. Denies the server with the IP address 192 168 100 0 full access to the "mybucket" bucket
B. Denies the server with the IP address 192 168 100 188 full access to the "mybucket" bucket
C. Grants all the servers within the 192 168 100 0/24 subnet full access to the "mybucket" bucket
D. Grants all the servers within the 192 168 100 188/32 subnet full access to the "mybucket" bucket

Show Suggested Answer

Suggested Answer: B 🗳️
http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html http://docs.aws.amazon.com/AmazonS3/latest/dev/amazon-s3-policy-keys.html

by kkwang at Sept. 30, 2019, 2:30 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

karmaah

Highly Voted 9 months ago

Answer is C : ************* Answers A & B mentioning 192.166.100 Series. Which is not mentioned in the policy. Hence Both are Incorrect. Ans C - Exactly fits inthe allowed IP address list. 192.168.100.0/24 Provides total list of 256 IPs. Start IP : 192.168.100.0 End IP : 192.168.100.255 Ans D is Incorrect since 92.168.100.188/32 Provides only one IP .,192.168.100.188

upvoted 7 times

shimmy

8 months, 1 week ago

The answer is B. 192.166.100.88 is in the 192.166.100.0/24 subnet so if that IP is denied then the policy does not allow all IP addresses in the 192.166.100.0/24 subnet. C is incorrect.

upvoted 3 times

...

Saaho

8 months, 2 weeks ago

If Ans D is wrong, answer C is wrong as well as 192.168.100.188/32 falls in 192.168.100.0/24 CIDR range

upvoted 3 times

...

Phil31

8 months, 1 week ago

Agree for the C, but in truth, the C is not really accurate because the policy allows all servers in the range 192.168.100.0/24 except for the address 192.168.100.88 which is included in the 192.168.100.0/24 range. This question is confusing.

upvoted 2 times

...

xxxdolorxxx

Most Recent 7 months, 3 weeks ago

I'm going with B.

upvoted 2 times

...

FFFCCCC33333

7 months, 3 weeks ago

B is the answer

upvoted 2 times

...

sunilpanda

7 months, 3 weeks ago

its B fqnn points is correct I think ans is B, because 192.168.100.188/32 (one machine) is included in 192.168.100.0/24 range, and deny rules has priority over allow rules

upvoted 2 times

...

fqnn

7 months, 3 weeks ago

I think ans is B, because 192.168.100.188/32 (one machine) is included in 192.168.100.0/24 range, and deny rules has priority over allow rules

upvoted 3 times

...

jchavarria12

8 months ago

B and C, I think is a multi-option question

upvoted 1 times

...

angelsrp

8 months, 1 week ago

Typo, I had this question in a aws course. Ans is B.

upvoted 2 times

...

dennismp

8 months, 2 weeks ago

B is the ans, both conditions must be true in this case.

upvoted 3 times

...

awscertified

8 months, 2 weeks ago

B. Denies the server with the IP address 192.166 100.188 full access to the "mybucket bucket

upvoted 1 times

...

allexxf

8 months, 4 weeks ago

A and B is correct - this policy dont allow access from ips 192.166.100.0 and 192.166.100.188 - only 192.168.100.0/24 (without 192.168.100.88)

upvoted 1 times

allexxf

8 months, 3 weeks ago

Or the answers have an error - 168 is needed instead of 166

upvoted 1 times

...

kkwang

9 months, 1 week ago

B is the answer

upvoted 3 times

aksliveswithaws

9 months ago

B is correct 192.168.100.88/32 is inside the block 192.168.100.0/24 Option C states Grants "All" the servers in the subnet 192.168.100.0/24 but 192.168.100.88/32 is blocked.

upvoted 3 times

...