Q72 — AWS SAA-C03 Ch.14

Question 72 of 100 | ← Chapter 14

Q1072. A company is moving data from an on-premises data center to the AWS Cloud.The company must store all its data in an Amazon S3 bucket.To comply with regulations, the company must also ensure that the data will be protected against overwriting indefinitely.Which solution will ensure that the data in the S3 bucket cannot be overwritten?

Correct Answer: C. Enable versioning for the S3 bucket. Configure S3 Object Lock for the S3 bucket with a legal hold.

Explanation

The solution that will ensure that the data in the S3 bucket cannot be overwritten indefinitely is:C. Enable versioning for the S3 bucket. Configure S3 Object Lock for the S3 bucket with a legal hold.### Explanation:Versioning: When versioning is enabled on an S3 bucket, all versions of an object are retained, allowing you to recover from accidental deletions or overwrites.S3 Object Lock with Legal Hold: Configuring Object Lock with a legal hold prevents the objects from being deleted or overwritten indefinitely, regardless of the retention period. This meets the requirement of ensuring data protection against overwriting indefinitely.### Other Options:A. Enable versioning for the S3 bucket. Use server-side encryption with Amazon S3 managed keys (SSE- S3) to protect the data: While versioning helps with recovery from overwrites, it does not prevent overwriting. Encryption does not address the overwriting concern.B. Disable versioning for the S3 bucket. Configure S3 Object Lock for the S3 bucket with a retention period of 1 year: A retention period of 1 year does not meet the requirement for indefinite protection against overwriting.D. Configure S3 Storage Lens for the S3 bucket. Use server-side encryption with customer-provided keys (SSE-C) to protect the data: S3 Storage Lens provides visibility into storage usage and activity but does not help with preventing overwrites. SSE-C provides encryption but does not address overwriting issues.### Conclusion:Option C is the most appropriate choice as it effectively combines versioning and Object Lock with a legal hold to ensure that data in the S3 bucket cannot be overwritten indefinitely.