Bird
0
0

You have enabled MFA for an IAM user and attached a policy requiring MFA for deleting S3 buckets. What will happen if the user tries to delete a bucket without MFA?

medium📝 service behavior Q5 of 15
AWS - Identity and Access Management
You have enabled MFA for an IAM user and attached a policy requiring MFA for deleting S3 buckets. What will happen if the user tries to delete a bucket without MFA?
AThe bucket will be deleted without any MFA check.
BThe delete request will be denied due to missing MFA authentication.
CThe user will receive a warning but the bucket will be deleted.
DThe bucket deletion will be queued until MFA is provided.
Step-by-Step Solution
Solution:
  1. Step 1: Understand policy enforcement with MFA

    Policies requiring MFA block actions if MFA is not provided.
  2. Step 2: Confirm delete action behavior

    Without MFA, delete bucket requests are denied, not queued or warned.
  3. Final Answer:

    The delete request will be denied due to missing MFA authentication. -> Option B
  4. Quick Check:

    MFA required policy denies action without token [OK]
Quick Trick: MFA policies block critical actions without token [OK]
Common Mistakes:
MISTAKES
  • Assuming warnings instead of denial
  • Thinking deletion queues
  • Believing actions succeed without MFA

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes