A media company stores petabytes of video archives in Amazon S3 Glacier Deep Archive. They receive a legal request to place a 'legal hold' on a specific set of archives, ensuring they cannot be deleted or modified by anyone, including the root user, until the hold is lifted. How should this be implemented?

Answer options:

Use S3 Object Lock in Governance mode.

Use S3 Object Lock in Compliance mode.

Create an SCP denying the s3:DeleteObject action.

Enable AWS Backup Vault Lock.

How to approach this question

Identify the S3 feature for immutable storage.

Full Answer

B.Use S3 Object Lock in Compliance mode.✓ Correct

Use S3 Object Lock in Compliance mode.

Amazon S3 Object Lock in Compliance mode provides WORM storage. It prevents any user, including the AWS account root user, from deleting or modifying the object until the retention period expires or the legal hold is removed.

Common mistakes

Choosing Governance mode, which is not strict enough for legal holds against administrators.

Question 40 All questions Question 42

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →