Amazon Exam SOA-C02 Topic 10 Question 86 Discussion

Actual exam question for Amazon's SOA-C02 exam

Question #: 86
Topic #: 10

A company needs to archive all audit logs for 10 years. The company must protect the logs from any future edits.

Which solution will meet these requirements?

AStore the data in an Amazon Elastic Block Store (Amazon EBS) volume. Configure AWS Key Management Service (AWS KMS) encryption.

BStore the data in an Amazon S3 Glacier vault. Configure a vault lock policy for write-once, read-many (WORM) access.

CStore the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Configure server-side encryption.

DStore the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Configure multi-factor authentication (MFA).

Show Suggested Answer

Suggested Answer: B

To meet the requirements of the workload, a company should store the data in an Amazon S3 Glacier vault and configure a vault lock policy for write-once, read-many (WORM) access. This will ensure that the data is stored securely and cannot be edited in the future. The other solutions (storing the data in an Amazon Elastic Block Store (Amazon EBS) volume and configuring AWS Key Management Service (AWS KMS) encryption, storing the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA) and configuring server-side encryption, or storing the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA) and configuring multi-factor authentication (MFA)) will not meet the requirements, as they do not provide a way to protect the audit logs from future edits.

https://docs.aws.amazon.com/zh_tw/AmazonS3/latest/userguide/object-lock.html

by Nana at Mar 06, 2024, 08:36 AM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Paris

7 days ago

But wait, what about the cost? Glacier is a cheaper storage option, but the retrieval costs might add up if we need to access the logs frequently. Maybe S3 Standard-IA with server-side encryption would be a more cost-effective solution?

upvoted 0 times

...

Arlette

8 days ago

You know, I was thinking the same thing. Glacier with a WORM policy seems like the way to go. That way, the logs can't be tampered with, even by accident.

upvoted 0 times

...

Tayna

9 days ago

Okay, so we're looking for a solution that provides long-term storage and data protection. I'm leaning towards option B, since Glacier's WORM policy sounds perfect for this use case.

upvoted 0 times

...

Shantay

10 days ago

Hmm, this is a tricky one. We need to ensure the logs are protected for 10 years and can't be edited. Let me think this through...

upvoted 0 times

...