Exam AWS Certified SAP on AWS - Specialty PAS-C01 topic 1 question 6 discussion

Exam question from Amazon's AWS Certified SAP on AWS - Specialty PAS-C01

Question #: 6
Topic #: 1

[All AWS Certified SAP on AWS - Specialty PAS-C01 Questions]

A company’s SAP basis team is responsible for database backups in Amazon S3. The company frequently needs to restore the last 3 months of backups into the pre-production SAP system to perform tests and analyze performance. Previously, an employee accidentally deleted backup files from the S3 bucket. The SAP basis team wants to prevent accidental deletion of backup files in the future.
Which solution will meet these requirements?

A. Create a new resource-based policy that prevents deletion of the S3 bucket.
B. Enable versioning and multi-factor authentication (MFA) on the S3 bucket.
C. Create signed cookies for the backup files in the S3 bucket. Provide the signed cookies to authorized users only.
D. Apply an S3 Lifecycle policy to move the backup files immediately to S3 Glacier.

Show Suggested Answer

Suggested Answer: B 🗳️

by bigmuramura2 at Jan. 27, 2023, 1:58 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

XaviIniesta

1 year, 3 months ago

B - MFA helps to avoid accidental deletion

upvoted 1 times

...

Mojakerian

1 year, 7 months ago

Correct is A Every backup file is different in the bucket, there is no new versions of it. A policy for the whole bucket is much more effective and simple.

upvoted 3 times

...

ggrodskiy

1 year, 11 months ago

Correct B. This option will allow the SAP basis team to enable versioning and multi-factor authentication (MFA) on the S3 bucket. Versioning is a feature that allows you to preserve, retrieve, and restore every version of every object stored in an S3 buckethttps://aws.amazon.com/getting-started/hands-on/protect-data-on-amazon-s3/. MFA is a security feature that requires users to provide two forms of authentication when performing certain actions on an S3 buckethttps://stackoverflow.com/questions/72634045/aws-s3-how-to-protect-against-accidental-deletion. By enabling versioning and MFA on the S3 bucket, the SAP basis team can protect their backup files from being overwritten or deleted by mistake or by unauthorized users. They can also recover any deleted versions of their backup files from the S3 bucket.

upvoted 3 times

...

Dhieraj

1 year, 11 months ago

Answer is B: When versioning is enabled, a simple DELETE cannot permanently delete an object. Instead, Amazon S3 inserts a delete marker in the bucket, and that marker becomes the current version of the object with a new ID. A wiil prevent all deletions..

upvoted 1 times

...