Scenario Practice

Security and Compliance · 30% of exam

An application running on an EC2 instance needs permission to read objects from a specific S3 bucket. What is the most secure way to grant this access?

Attach an IAM role with S3 read permissions to the instance Hard-code an IAM user's access key and secret key into the application Make the S3 bucket public Share the root account credentials with the application

Explain your reasoning

Writing a sentence before submitting forces active recall — this is the part that actually builds retention.

How confident are you?

1 2 3 4 5

Guessing Certain