A company's SAP basis team is responsible for database backups in Amazon S3. The company frequently needs to restore the last 3 months of backups into the pre-production SAP system to perform tests…

Question

Options

• ACreate a new resource-based policy that prevents deletion of the S3 bucket.
• BEnable versioning and multi-factor authentication (MFA) on the S3 bucket.
• CCreate signed cookies for the backup files in the S3 bucket. Provide the signed cookies to
• DApply an S3 Lifecycle policy to move the backup files immediately to S3 Glacier.

• A
  14% (8)
• B
  76% (44)
• C
  3% (2)
• D
  7% (4)

Explanation

Enabling S3 Versioning means that when an object is 'deleted,' Amazon S3 inserts a delete marker rather than permanently removing the data; the previous versions remain recoverable. This directly addresses accidental deletion: the files can be restored by removing the delete marker. Enabling MFA Delete adds a second layer of protection by requiring multi-factor authentication before versioned objects can be permanently deleted or versioning can be suspended, preventing even an authorized but careless IAM user from destroying backup data. Together, these two features fulfill both requirements - protecting against accidental deletion and retaining 3 months of restorable backups. A resource-based policy (A) alone can restrict deletion but does not provide recovery if a deletion does occur. Signed cookies (C) control read access, not deletion. An S3 Lifecycle policy moving files to Glacier (D) reduces cost but does not prevent accidental deletion.

No community discussion yet for this question.