SAA-C03 Question #303: Real Exam Question with Answer & Explanation

Question

A financial services company must retain log data for 1 year. The company stores log files in an Amazon S3 bucket and wants to prevent any user from deleting or overwriting the log files during this period. The data must remain available for read-only requests. Which solution will meet this requirement?

Options

• AEnable S3 Versioning on the bucket. Use Object Lock in compliance mode with a 1-year retention
• BEnable S3 Transfer Acceleration on the bucket. Create an S3 Lifecycle Configuration rule to
• CEnable S3 Versioning on the bucket. Create an S3 Lifecycle Configuration rule to move objects to
• DCreate an AWS Lambda function to programmatically check the timestamp of S3 data and to

Explanation

To ensure that log files are immutable and cannot be deleted or overwritten for a specified retention period, Amazon S3 offers Object Lock in Compliance Mode. When enabled: Compliance Mode: Ensures that a protected object version can't be overwritten or deleted by any user, including the root user in your AWS account, for the duration of the retention period. AWS Documentation S3 Versioning: Must be enabled on the bucket to use Object Lock. This allows multiple versions of an object to be stored, ensuring that previous versions are preserved and protected. Amazon Web Services, Inc. By enabling S3 Versioning and applying Object Lock in Compliance Mode with a 1-year retention period, the company can meet regulatory requirements to retain log data securely and prevent any modifications or deletions during that time.

No community discussion yet for this question.