Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 478 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 478
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited.

Which solution will meet these requirements in the MOST secure way?

A. Upload all files to an Amazon S3 bucket that is configured for static website hosting. Grant read-only IAM permissions to any AWS principals that access the S3 bucket until the designated date.
B. Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.
C. Create a new Amazon S3 bucket with S3 Versioning enabled. Configure an event trigger to run an AWS Lambda function in case of object modification or deletion. Configure the Lambda function to replace the objects with the original versions from a private S3 bucket.
D. Upload all files to an Amazon S3 bucket that is configured for static website hosting. Select the folder that contains the files. Use S3 Object Lock with a retention period in accordance with the designated date. Grant read-only IAM permissions to any AWS principals that access the S3 bucket.

Show Suggested Answer

Suggested Answer: B 🗳️

by nosense at May 19, 2023, 3:05 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Lin878

Highly Voted 1 year ago

Selected Answer: B

Object Lock works only in buckets that have S3 Versioning enabled. https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html

upvoted 6 times

...

nosense

Highly Voted 2 years, 1 month ago

Selected Answer: B

Option A allows the files to be modified or deleted by anyone with read-only IAM permissions. Option C allows the files to be modified or deleted by anyone who can trigger the AWS Lambda function. Option D allows the files to be modified or deleted by anyone with read-only IAM permissions to the S3 bucket

upvoted 5 times

wizcloudifa

1 year, 2 months ago

no it doesnt, did you not notice this part: "S3 Object Lock with a retention period in accordance with the designated date", this part avoids deletion/modification of files

upvoted 2 times

...

eduvaldi

Most Recent 1 week, 6 days ago

Selected Answer: B

Versioning and Object Lock is necessary

upvoted 1 times

...

MatAlves

9 months, 1 week ago

Selected Answer: B

Versioning Enabled + Object Lock = B

upvoted 2 times

...

potomac

1 year, 7 months ago

Selected Answer: B

S3 bucket policy

upvoted 4 times

...

thanhnv142

1 year, 8 months ago

B is correct. A doesnot have S3 object lock, but deletion is prohibited, which implies object lock C does not have S3 as static web, but have to share the s3 with the public D mentions files - but S3 manages objects, not file

upvoted 2 times

...

hydro143

1 year, 8 months ago

D? Its like B, but also with read-only access limitations for anyone with IAM permissions. Also versioning in B doesn't help with anything.

upvoted 2 times

ManikRoy

1 year, 1 month ago

Enabling versioning is a pre-requisite for object lock.

upvoted 2 times

...

Guru4Cloud

1 year, 10 months ago

Selected Answer: B

Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects.

upvoted 3 times

...