SOA-C02 · Question #733
A company stores data in an Amazon S3 bucket. The company must ensure that some specific objects are not deleted or overwritten for 10 years to comply with local regulations. The company wants to…
The correct answer is D. Enable versioning for the S3 bucket. Set up S3 Object Lock in compliance mode. S3 Object Lock requires bucket versioning and, for immutable retention that even admins/root can’t override for 10 years, you use compliance mode. This enforces write-once-read-many protection against deletes or overwrites until the retention period expires.
Question
A company stores data in an Amazon S3 bucket. The company must ensure that some specific objects are not deleted or overwritten for 10 years to comply with local regulations. The company wants to use Amazon S3 Object Lock to protect the objects. Which solution will meet these requirements?
Options
- AConfigure the S3 bucket to require multi-factor authentication (MFA) for delete operations to
- BConfigure object ACLs and an S3 Lifecycle configuration to retain objects. Set up S3 Object Lock
- CEnable encryption for the S3 bucket that uses a custom AWS KMS key to restrict deletions or data
- DEnable versioning for the S3 bucket. Set up S3 Object Lock in compliance mode.
How the community answered
(53 responses)- A19% (10)
- B6% (3)
- C4% (2)
- D72% (38)
Explanation
S3 Object Lock requires bucket versioning and, for immutable retention that even admins/root can’t override for 10 years, you use compliance mode. This enforces write-once-read-many protection against deletes or overwrites until the retention period expires.
Topics
Community Discussion
No community discussion yet for this question.