Amazon SCS-C02 Exam - Topic 8 Question 24 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 24
Topic #: 8

A company is storing data in Amazon S3 Glacier. A security engineer implemented a new vault lock policy for 10 TB of data and called the initiate-vault-lock operation 12 hours ago. The audit team identified a typo in the policy that is allowing unintended access to the vault.

What is the MOST cost-effective way to correct this error?

ACall the abort-vault-lock operation. Update the policy. Call the initiate-vault-lock operation again.

BCopy the vault data to a new S3 bucket. Delete the vault. Create a new vault with the data.

CUpdate the policy to keep the vault lock in place

DUpdate the policy. Call the initiate-vault-lock operation again to apply the new policy.

Show Suggested Answer

Suggested Answer: A

The most cost-effective way to correct a typo in a vault lock policy during the 24-hour initiation period is to call the abort-vault-lock operation. This action stops the vault lock process, allowing the security engineer to correct the policy and re-initiate the vault lock with the corrected policy. This approach avoids the need for data transfer or creating a new vault, thus minimizing costs and operational overhead.

by Agustin at Jul 18, 2024, 09:13 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Royal

5 months ago

Definitely going with D, it’s straightforward!

upvoted 0 times

...

Jacquelyne

5 months ago

Updating the policy while keeping the lock sounds risky.

upvoted 0 times

...

Alana

5 months ago

Surprised they didn't catch that typo sooner!

upvoted 0 times

...

Carma

5 months ago

I disagree, B would be way too costly!

upvoted 0 times

...

Jani

6 months ago

Option A seems like the best move here.

upvoted 0 times

...

Casie

6 months ago

I’m leaning towards option A, but I’m worried about the costs involved with aborting and re-initiating the lock.

upvoted 0 times

...

Yaeko

6 months ago

This reminds me of a practice question where we had to deal with vault policies. I think updating the policy while keeping the lock might be the best approach.

upvoted 0 times

...

Helaine

6 months ago

I’m not entirely sure, but I feel like option D could be risky since the lock is already in place.

upvoted 0 times

...

Cammy

6 months ago

I remember something about the vault lock process being pretty strict, so I think aborting it might be the right move.

upvoted 0 times

...

Shelton

6 months ago

I've dealt with this type of situation before. I think option D is the way to go - update the policy and re-initiate the vault lock.

upvoted 0 times

...

Deandrea

6 months ago

I'm a bit confused on the best approach here. I'll need to review the AWS documentation to make sure I understand the differences between the options.

upvoted 0 times

...

Brittni

6 months ago

Ugh, I hate dealing with these Glacier vault lock issues. I think I'll go with option A - abort the lock, update the policy, and start over.

upvoted 0 times

...

Lenna

6 months ago

Okay, let's see here. I'm pretty sure the most cost-effective way is to update the policy and then initiate the vault lock again. But I'll double-check the details.

upvoted 0 times

...

Ressie

6 months ago

Hmm, this seems like a tricky one. I'll need to carefully review the options and think through the cost implications.

upvoted 0 times

...

Larae

7 months ago

Hmm, I'm a bit unsure about this one. There are a lot of elements to consider, like customer segments, value propositions, and revenue streams. I'll need to carefully read through the question and think it through step-by-step.

upvoted 0 times

...

Soledad

7 months ago

Okay, let's see. The question is asking about how to execute the changeOption function after the user chooses an option in the select menu. I think the answer is probably A, since that's the only option that directly modifies the select element.

upvoted 0 times

...

Pedro

7 months ago

This question seems straightforward, but I want to make sure I understand the key characteristics of Nokia's non-stop routing implementation before selecting my answers.

upvoted 0 times

...

Van

2 years ago

Option C? Are you kidding me? That's just sweeping the problem under the rug. Nah, D is definitely the way to go, clean and simple.

upvoted 0 times

...

Leah

2 years ago

Haha, someone's got some explaining to do for that typo! I'd go with D, gotta love those AWS CLI commands, am I right?

upvoted 0 times

...

Ailene

2 years ago

This is a tricky one, but I reckon D is the most efficient way to fix the issue. Calling abort-vault-lock and then re-initiating it just seems like a waste of time and resources.

upvoted 0 times

Rosita

2 years ago

Updating the policy and calling the initiate-vault-lock operation again makes the most sense to me.

upvoted 0 times

...

Thad

2 years ago

I would go with option D as well, it's the most cost-effective solution.

upvoted 0 times

...

Jolene

2 years ago

Yeah, I think updating the policy and reapplying it is the best course of action.

upvoted 0 times

...

Matilda

2 years ago

I agree, option D seems like the most efficient way to correct the error.

upvoted 0 times

...

Lili

2 years ago

Option B sounds like a lot of work and unnecessary data transfer. I'd rather go with the simpler solution of just updating the policy and reapplying it.

upvoted 0 times

Gregoria

2 years ago

B: Yeah, updating the policy and reapplying it is definitely the way to go in this situation.

upvoted 0 times

...

Otis

2 years ago

A: I agree, option D seems like the most efficient way to correct the error.

upvoted 0 times

...

Glory

2 years ago

I see your point, Vincent. However, updating the policy and reapplying the vault lock might be quicker and more efficient in the long run.

upvoted 0 times

...

Corazon

2 years ago

Hmm, I think option D is the way to go. Updating the policy and calling the initiate-vault-lock operation again is the most cost-effective approach, without having to copy all the data or delete the vault.

upvoted 0 times