AWS SAA-C03 · Question 07 · Domain 1.3: Data Security
A financial institution needs to store highly sensitive documents in Amazon S3. Compliance regulations require that the documents cannot be deleted or modified by anyone, including the AWS account root user, for a period of 7 years. <br/><br/>Which TWO actions should the solutions architect take to meet this requirement? (Select TWO.)
Answer options:
Enable S3 Object Lock in Governance mode.
Enable S3 Object Lock in Compliance mode.
Specify a retention period of 7 years.
Enable MFA Delete on the S3 bucket.
Create an IAM deny policy for the s3:DeleteObject action.
65 questions · hints · full answers · grading