Amazon PAS-C01 Exam - Topic 3 Question 60 Discussion

Actual exam question for Amazon's PAS-C01 exam

Question #: 60
Topic #: 3

A company's SAP basis team is responsible for database backups in Amazon S3. The company frequently needs to restore the last 3 months of backups into the pre-production SAP system to perform tests and analyze performance. Previously an employee accidentally deleted backup files from the S3 bucket. The SAP basis team wants to prevent accidental deletion of backup files in the future.

Which solution will meet these requirements?

ACreate a new resource-based policy that prevents deletion of the S3 bucket

BEnable versioning and multi-factor authentication (MFA) on the S3 bucket

CCreate signed cookies for the backup files in the S3 bucket Provide the signed cookies to authorized users only

DApply an S3 Lifecycle policy to move the backup fries immediately to S3 Glacier

Show Suggested Answer

Suggested Answer: B

enabling versioning and multi-factor authentication (MFA) on the S3 bucket. Versioning will allow you to keep multiple versions of your backup files in the same bucket, so you won't have to worry about accidental deletion. Multi-factor authentication (MFA) will help ensure that only authorized users can access or delete the backup files.

by Earnestine at Jul 09, 2025, 11:45 AM

Limited Time Offer

25%

Off

Get Premium PAS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carlee

3 months ago

Versioning is a must for preventing accidental deletions.

upvoted 0 times

...

Arminda

3 months ago

I disagree, a resource-based policy could work too.

upvoted 0 times

...

Francene

3 months ago

Surprised they didn't mention S3 Object Lock for immutability!

upvoted 0 times

...

Freida

4 months ago

Not sure if MFA alone is enough, what if someone has access?

upvoted 0 times

...

Delmy

4 months ago

Option B is the best choice, MFA adds a solid layer of security.

upvoted 0 times

...

Marquetta

4 months ago

Moving files to S3 Glacier seems like a way to save space, but I don't think it would help with preventing deletions. We need to keep the backups readily accessible for testing.

upvoted 0 times

...

Brandee

4 months ago

I feel like we had a practice question about S3 policies, but I can't recall if a resource-based policy would actually prevent deletions. It seems like it might just restrict access.

upvoted 0 times

...

Vivan

4 months ago

I'm not entirely sure, but I think MFA might add an extra layer of security for deletions. It could be a good option to consider alongside versioning.

upvoted 0 times

...

William

5 months ago

I remember we discussed the importance of versioning in S3 during our last study session. It seems like enabling versioning could help prevent accidental deletions.

upvoted 0 times

...

Wilford

5 months ago

Immediately moving the backups to Glacier seems a bit extreme. That might make it harder to restore the files quickly when needed. I think the versioning and MFA approach is the safest bet here.

upvoted 0 times

...

Diane

5 months ago

Ooh, the signed cookies option is interesting. That could be a good way to control access and prevent unauthorized deletions. I'll make sure to read the details on that one.

upvoted 0 times

...

Willie

5 months ago

Hmm, I'm a bit confused. Creating a resource-based policy to prevent deletion seems like it could work, but I'm not sure if that's the most robust solution. I'll have to think this through carefully.

upvoted 0 times

...

Glendora

5 months ago

This looks like a straightforward security question. I think enabling versioning and MFA on the S3 bucket is the best solution to prevent accidental deletions.

upvoted 0 times

...