SAA-C03 Q686 · Storage

Question

A company must protect sensitive documents in Amazon S3 from deletion or modification for a fixed retention period to meet regulatory requirements. Which solution will meet these requirements?

Accepted Answer

**S3 Object Lock in compliance mode** is the correct answer because it satisfies every requirement stated in the question:

1. **Protection from deletion**: In compliance mode, NO ONE — not even the root account user — can delete the object version during the retention period. This is the strongest protection AWS offers.

2. **Protection from modification**: Object Lock works with versioning. A locked object version cannot be overwritten. Any new upload creates a new version, but the original locked version remains immutable.

3. **Fixed retention period**: Compliance mode requires you to set a specific retention period (e.g., 7 years). The lock cannot be shortened or removed until that period expires.

4. **Regulatory requirements**: The keyword 'regulatory' is critical. Compliance mode i

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips