AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ85

Data Security and Governance

A company is uploading log files from on-premises servers to an Amazon S3 bucket. The company must verify that the logs on the on-premises server are identical to the logs stored in the S3 bucket.

Which solution satisfies this requirement?

  • A Use the AWS SDK to automatically compute CRC32 checksums during the upload. Store the checksums in S3 object metadata.
  • B Create an AWS Lambda function to calculate SHA-256 checksums. Store results in a separate metadata table. Validate the logs after the upload.
  • C Enable S3 Object Lock in compliance mode on the S3 bucket. Upload the objects to the bucket.
  • D After uploading the objects to the S3 bucket, enable S3 Object Lock in governance mode on the S3 objects.
Explanation

Amazon S3 supports upload-time checksum validation. An AWS SDK can calculate a CRC32 checksum and include it with the upload; S3 independently calculates the checksum, compares it with the supplied value, rejects the upload if they differ, and stores the checksum as object metadata. This verifies data integrity between the source upload and the stored object. S3 Object Lock controls retention and deletion, not content-integrity validation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!