Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 925 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 925
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company needs to implement a new data retention policy for regulatory compliance. As part of this policy, sensitive documents that are stored in an Amazon S3 bucket must be protected from deletion or modification for a fixed period of time.

Which solution will meet these requirements?

A. Activate S3 Object Lock on the required objects and enable governance mode.
B. Activate S3 Object Lock on the required objects and enable compliance mode.
C. Enable versioning on the S3 bucket. Set a lifecycle policy to delete the objects after a specified period.
D. Configure an S3 Lifecycle policy to transition objects to S3 Glacier Flexible Retrieval for the retention duration.

Show Suggested Answer

Suggested Answer: B 🗳️

by swati1508 at Aug. 7, 2024, 10 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

raghav2704

5 days, 12 hours ago

Selected Answer: B

we need the data to be protected from deletion, hence option B ( it protects from both versioning and deletion ) and ofcourse we dont want governance mode ( option A )and option D is a sidetrack.

upvoted 1 times

...

Sarayounisaldossary

2 months, 1 week ago

Selected Answer: B

This is tricky between A and C but-- the question focused on compliance and FIXED Period of time... governance feature will let certain users to override B

upvoted 1 times

...

JA2018

6 months, 2 weeks ago

Selected Answer: B

S3 Object Lock: - This feature allows you to lock objects in an S3 bucket, preventing them from being deleted or modified for a specified retention period. Compliance mode: - When enabled, S3 Object Lock in compliance mode provides the most stringent protection, ensuring that once an object is locked, even the account root user cannot delete or modify it, making it ideal for regulatory compliance scenarios where data must be preserved for a fixed period

upvoted 3 times

...

SmartGil2024

6 months, 3 weeks ago

Selected Answer: C

The question says : : ''for a fixed period of time.", why not C ? Because the items can be deleted after this fix period of time./ with compliance mode - no one can delete, it is true, but we need to also pay attention to the fixed period of time.

upvoted 1 times

JA2018

6 months, 2 weeks ago

While versioning helps maintain historical data, a lifecycle policy alone cannot guarantee that sensitive documents will not be deleted prematurely, as it can be modified or deleted.

upvoted 1 times

...