AWS Certified Sysops Administrator Associate · Free Practice Question Medium
Question 4
A corporation maintains a secured Amazon S3 bucket within the us-east-1 Region. Users located in the ap-south-1 Region interact with this S3 bucket via the internet. The users from ap-south-1 require improved speed for transferring large files to and from the S3 bucket.
Which approach will fulfill these specifications?
-
A
Alter the server-side encryption on the S3 bucket from AES to RSA.
-
B
Minimize the S3 bucket prefixes inside the S3 bucket.
-
C
Enable S3 Transfer Acceleration on the S3 bucket and use the new s3-accelerate endpoint's domain name for access.
-
D
Construct a new S3 bucket with an identical name in ap-south-1, utilizing the new S3 bucket endpoint's domain name for access.
Reveal correct answer
Correct answer: C
Explanation
Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your end users and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations.
As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path. Therefore, this is the best solution to speed up the transfer for large files to users in another region.
CORRECT: "Enable S3 Transfer Acceleration on the S3 bucket and use the new s3-accelerate endpoint's domain name for access" is the correct answer (as explained above.)
INCORRECT: "Minimize the S3 bucket prefixes inside the S3 bucket" is incorrect
INCORRECT: "Alter the server-side encryption on the S3 bucket from AES to RSA" is incorrect.
Changing the encryption method from AES (Advanced Encryption Standard) to RSA (Rivest-Shamir-Adleman) wouldn't improve transfer speeds. Both AES and RSA are encryption algorithms used for data security, not for performance enhancement. In fact, AES is generally faster and more efficient than RSA for encrypting data in transit, so switching to RSA could potentially decrease performance.
INCORRECT: "Construct a new S3 bucket with an identical name in ap-south-1, utilizing the new S3 bucket endpoint's domain name for access" is incorrect.
Amazon S3 bucket names are globally unique across all AWS accounts, so you can't create an S3 bucket with an identical name in another region. Furthermore, just creating a bucket in a closer region wouldn't automatically replicate or move the data from the original bucket.
References:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/transfer-acceleration.html
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
