Configuration Panel PBQs: CompTIA Cloud+ (CV0-004)

You are a cloud administrator at a mid-size company that recently provisioned an S3 bucket named 'hr-documents-prod' to store employee records. A routine security scan found that the bucket has public access enabled, versioning is off, and server-side encryption is using SSE-S3 instead of the company-required SSE-KMS. Your manager has asked you to harden the bucket to meet the corporate data protection baseline before HR begins uploading documents.