exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Exam AWS-SysOps topic 1 question 827 discussion

Exam question from Amazon's AWS-SysOps
Question #: 827
Topic #: 1
[All AWS-SysOps Questions]

An application is being migrated to AWS with the requirement that archived data be retained for at least 7 years.
What Amazon Glacier configuration option should be used to meet this compliance requirement?

  • A. A Glacier data retrieval policy
  • B. A Glacier vault access policy
  • C. A Glacier vault lock policy
  • D. A Glacier vault notification
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://d0.awsstatic.com/whitepapers/Amazon-GlacierVaultLock_CohassetAssessmentReport.pdf

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
nicat
Highly Voted 2 years, 9 months ago
C. A Glacier vault lock policy https://docs.aws.amazon.com/amazonglacier/latest/dev/vault-lock.html
upvoted 14 times
kopper2019
2 years, 9 months ago
agree correct answer: Vault Locking Overview S3 Glacier Vault Lock allows you to easily deploy and enforce compliance controls for individual S3 Glacier vaults with a vault lock policy. You can specify controls such as “write once read many” (WORM) in a vault lock policy and lock the policy from future edits. Once locked, the policy can no longer be changed. S3 Glacier enforces the controls set in the vault lock policy to help achieve your compliance objectives, for example, for data retention. You can deploy a variety of compliance controls in a vault lock policy using the AWS Identity and Access Management (IAM) policy language. For more information about vault lock policies, see Amazon S3 Glacier Access Control with Vault Lock Policies.
upvoted 3 times
...
...
albert_kuo
Most Recent 11 months, 2 weeks ago
Selected Answer: C
Amazon Glacier vault lock is a feature that allows you to set a governance policy on a Glacier vault to enforce compliance controls. Once a vault lock policy is applied to a Glacier vault, the policy cannot be modified or deleted for the duration of the lock period specified in the policy. This ensures that the data stored in the vault remains immutable and cannot be deleted or altered until the lock period expires. A Glacier vault lock policy can be used to meet various compliance and data retention requirements, such as retaining data for a specific period (e.g., 7 years) or ensuring that data is not deleted or modified for a certain duration.
upvoted 1 times
...
RicardoD
2 years, 8 months ago
C is the answer
upvoted 1 times
...
abhishek_m_86
2 years, 9 months ago
C. A Glacier vault lock policy Seem correct
upvoted 2 times
...
jackdryan
2 years, 9 months ago
I'll go with C
upvoted 1 times
...
vob
2 years, 9 months ago
C by implication that it is for compliance reasons and therefore don't want to permit any editing whatsoever.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...