Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon Exam BDS-C00 Topic 2 Question 86 Discussion

Actual exam question for Amazon's BDS-C00 exam
Question #: 86
Topic #: 2
[All BDS-C00 Questions]

A systems engineer for a company proposes digitalization and backup of large archives for customers. The systems engineer needs to provide users with a secure storage that makes sure that data will never be tempered with once it has been uploaded. How should this be accomplished?

Show Suggested Answer Hide Answer
Suggested Answer: A, B, D

Contribute your Thoughts:

Tamesha
1 months ago
The solution should be as secure as Fort Knox, but not as complicated as building Fort Knox. I think the Glacier Vault with the Deny Vault lock policy is the way to go.
upvoted 0 times
Joaquin
1 days ago
C) Definitely, we need a solution that is secure and reliable for our customers' data.
upvoted 0 times
...
Agustin
6 days ago
B) I agree, the Glacier Vault with the Deny Vault lock policy seems like the most secure option.
upvoted 0 times
...
Alysa
9 days ago
A) Create an Amazon Glacier Vault. Specify a ''Deny'' Vault lock policy on this vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
Charlesetta
9 days ago
C) Definitely, we need a solution that is secure and reliable for our customers' data.
upvoted 0 times
...
Fausto
13 days ago
B) I agree, the Glacier Vault with the Deny Vault lock policy seems like the most secure option.
upvoted 0 times
...
Tiera
18 days ago
A) Create an Amazon Glacier Vault. Specify a ''Deny'' Vault lock policy on this vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
...
Daren
2 months ago
I'm picturing the engineer frantically trying to remember which option blocks the 'glacier:DeleteArchive' action. 'Ugh, was it Deny Vault policy or Deny Vault access policy?'
upvoted 0 times
Selma
10 days ago
C) Create an Amazon Glacier Vault. Specify a ''Deny'' vault access policy on this Vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
Cornell
17 days ago
B) Create an Amazon S3 bucket. Specify a ''Deny'' bucket policy on this bucket to block ''s3:DeleteObject''.
upvoted 0 times
...
Zona
17 days ago
A) Create an Amazon Glacier Vault. Specify a ''Deny'' Vault lock policy on this vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
...
Vallie
2 months ago
Creating a secondary AWS account just to grant PutObject permissions? That's a bit overkill, don't you think?
upvoted 0 times
Lizette
8 days ago
B) Create an Amazon S3 bucker. Specify a ''Deny'' bucket policy on this bucket to block ''s3:DeleteObject''.
upvoted 0 times
...
Paola
29 days ago
A) Create an Amazon Glacier Vault. Specify a ''Deny'' Vault lock policy on this vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
...
Winfred
2 months ago
Hmm, the S3 bucket option sounds simpler, but a Deny bucket policy might not be as foolproof as the Glacier Vault.
upvoted 0 times
Elmer
1 months ago
User 2: Yeah, but the S3 bucket with a Deny bucket policy could also work if implemented correctly.
upvoted 0 times
...
Jackie
1 months ago
User 1: I think the Glacier Vault with a Deny vault access policy is the most secure option.
upvoted 0 times
...
Brice
1 months ago
User 2: Yeah, but the S3 bucket with a Deny bucket policy could also work if set up correctly.
upvoted 0 times
...
Lashandra
1 months ago
User 1: I think the Glacier Vault with a Deny vault access policy would be more secure.
upvoted 0 times
...
...
Tien
2 months ago
A Glacier Vault with a Deny Vault lock policy is the way to go. That'll make sure those archives are locked down tight!
upvoted 0 times
Sabra
1 months ago
A Glacier Vault with a Deny Vault lock policy is the way to go. That'll make sure those archives are locked down tight!
upvoted 0 times
...
Mary
1 months ago
B) Create an Amazon S3 bucker. Specify a ''Deny'' bucket policy on this bucket to block ''s3:DeleteObject''.
upvoted 0 times
...
Pearly
2 months ago
A) Create an Amazon Glacier Vault. Specify a ''Deny'' Vault lock policy on this vault to block ''glacier:DeleteArchive''.
upvoted 0 times
...
...
Lynda
2 months ago
I see your point, but I still think option A is better because Glacier Vaults are specifically designed for long-term archival storage.
upvoted 0 times
...
Laurene
2 months ago
I disagree, I believe option B is more secure. By using an S3 bucket with a 'Deny' bucket policy, we can block deletion of objects.
upvoted 0 times
...
Lynda
3 months ago
I think option A is the best choice because using a Glacier Vault with a 'Deny' Vault lock policy will prevent deletion of archives.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77