New Year Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Amazon Web Services AWS Certified Security - Specialty SCS-C02 Question # 21 Topic 3 Discussion

Amazon Web Services AWS Certified Security - Specialty SCS-C02 Question # 21 Topic 3 Discussion

SCS-C02 Exam Topic 3 Question 21 Discussion:
Question #: 21
Topic #: 3

A security engineer needs to implement a write-once-read-many (WORM) model for data that a company will store in Amazon S3 buckets. The company uses the S3 Standard storage class for all of its S3 buckets. The security engineer must en-sure that objects cannot be overwritten or deleted by any user, including the AWS account root user.

Which solution will meet these requirements?


A.

Create new S3 buckets with S3 Object Lock enabled in compliance mode. Place objects in the S3 buckets.


B.

Use S3 Glacier Vault Lock to attach a Vault Lock policy to new S3 buckets. Wait 24 hours to complete the Vault Lock process. Place objects in the S3 buckets.


C.

Create new S3 buckets with S3 Object Lock enabled in governance mode. Place objects in the S3 buckets.


D.

Create new S3 buckets with S3 Object Lock enabled in governance mode. Add a legal hold to the S3 buckets. Place objects in the S3 buckets.


Get Premium SCS-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.