1. Question 1

Correct statements about S3 Cross-Region Replication & KMS

• ❌ Same account + SSE possible

• ❌ Same account + SSE not possible

• ✅ Different accounts allowed + SSE possible

• ❌ Different accounts allowed + SSE not possible

Explanation:

• S3 CRR supports replication across different AWS accounts.

• Replicated objects CAN use SSE, including SSE-KMS.

---

2. Question 2 (Choose THREE)

Correct statements about VPC scope and hybrid architecture

• ✅ Amazon VPC allows full control over networking, including firewall rules (security groups & NACLs).

• ❌ S3 relies on AWS for data-level security — incorrect because customers must configure IAM policies, bucket policies, ACLs.

• ✅ Private subnet resources need NAT Gateway + route tables for internet access.

• ❌ Avoid VPCs → completely incorrect.

• ❌ S3 is less secure → incorrect. S3 is not public by default; access is denied unless explicitly opened.

• ✅ AWS VPN provides secure connectivity between on-prem and AWS.

Correct answers: 1, 3, 6

---

3. Question 3 (Choose THREE)

Correct statements about AWS Storage Gateway

• ✅ Hybrid cloud storage service providing on-prem access to virtually unlimited cloud storage

• ❌ Requires buying new hardware — WRONG (you use VM, hardware appliance is optional)

• ✅ Provides on-prem data access while using AWS agility, economics, and security

• ❌ Limited to on-prem only — WRONG (cloud-to-cloud scenarios also supported e.g., File Gateway between regions)

• ✅ Supports compliance via AWS Backup for Volume Gateway

• ❌ Only S3 File Gateway — WRONG (File, Tape, and Volume Gateway types exist)

Correct answers: 1, 3, 5

---

4. Question 4

Best “object, file, block” storage category

• ❌ DataSync, Snow

• ✅ S3 (object), EFS (file), EBS (block), FSx (file)

• ❌ Storage Gateway, Snow

• ❌ Elastic Disaster Recovery, Backup

Explanation:
These four are the core durable storage services for object, file, and block.

---

5. Question 5

S3 vs EBS durability

• ✅ True

• ❌ False

Explanation:

• S3 durability = 11 nines (99.999999999%)

• EBS durability = lower, typically 99.8–99.9% depending on type

So yes, S3 is designed for much higher durability.

---

🧾 Summary Table

---