Exam AWS-SysOps topic 1 question 895 discussion

• Object versions can't be overwritten or deleted by any user, including the root user • Objects retention modes can't be changed, and retention periods can't be shortened

https://aws.amazon.com/blogs/storage/protecting-data-with-amazon-s3-object-lock/

C is Correct. You should use the Compliance mode if you have a requirement to store compliant data. You should only use the Compliance mode if you never want any user, including the root user in your AWS account, to be able to delete the objects during a pre-defined retention period.

C is the answer Compliance mode needs to be used in order to forbid Root user to delete files

C - Governance mode allows deletion based on special permissions. Where as Compliance mode doesn't even allow Root users to delete.

You should use the Governance mode if you want to protect objects from being deleted by most users during a pre-defined retention period, but at the same time want some users with special permissions to have the flexibility to alter the retention settings or delete the objects. Users with the s3:BypassGovernanceRetention permission can override or remove governance-mode retention settings. Most customers will use the Governance mode since they don’t have compliant storage requirements. You should use the Compliance mode if you have a requirement to store compliant data. You should only use the Compliance mode if you never want any user, including the root user in your AWS account, to be able to delete the objects during a pre-defined retention period. Answer C . https://aws.amazon.com/blogs/storage/protecting-data-with-amazon-s3-object-lock/

C - Compliance Mode https://aws.amazon.com/blogs/storage/protecting-data-with-amazon-s3-object-lock/ https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html

it should be C n compliance mode, a protected object version can't be overwritten or deleted by any user, including the root user in your AWS account. When an object is locked in compliance mode, its retention mode can't be changed, and its retention period can't be shortened. Compliance mode helps ensure that an object version can't be overwritten or deleted for the duration of the retention period. If B, we can still delete object if we have a special permission https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html

C is the answer https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html

B is good