AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ214

Data Security and Governance

A company stores customer records in Amazon S3. The company must neither delete nor modify customer record data for 7 years after each record is created. The root user must also be unable to delete or modify the data.

A data engineer wants to use S3 Object Lock to protect the data.

Which solution meets these requirements?

  • A Enable governance mode on the S3 bucket. Use a default retention period of 7 years.
  • B Enable compliance mode on the S3 bucket. Use a default retention period of 7 years.
  • C Place a legal hold on individual objects in the S3 bucket. Set the retention period to 7 years.
  • D Set the retention period for individual objects in the S3 bucket to 7 years.
Explanation

Amazon S3 Object Lock compliance mode prevents deletion or overwrite of protected object versions until the retention period expires, and it cannot be bypassed by any user, including the AWS account root user. A bucket-level default retention period in compliance mode applies a seven-year retention period to object versions placed in the bucket.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!