SAA-C03 Q639 · Storage

Question

A company plans to use an Amazon S3 bucket to archive backup data. Regulations require the company to retain the backup data for 7 years. During the retention period, the company must prevent users, including administrators, from deleting the data. The company can delete the data after 7 years. Which solution will meet these requirements?

Accepted Answer

**Answer C: S3 Object Lock in Compliance Mode + Lifecycle Policy**

Let's map each requirement to the solution:

1. **Retain backup data for 7 years** → S3 Object Lock with a default retention period of 7 years automatically applies WORM (Write Once Read Many) protection to every object uploaded to the bucket.

2. **Prevent ALL users, including administrators, from deleting data** → **Compliance mode** is the critical distinction. In compliance mode, **no one** — not even the root account user — can delete or overwrite a protected object version until the retention period expires. This is the strongest immutability guarantee AWS offers.

3. **Delete data after 7 years** → An S3 Lifecycle policy can be configured to automatically delete objects after 7 years. Once the retention period expir

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips