AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 265

Question

A company stores sensitive data in an Amazon S3 bucket. The company encrypts the data at rest by using server-side encryption with Amazon S3 managed keys (SSE-S3). A security engineer must prevent any modifications to the data in the S3 bucket. Which solution will meet this requirement?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure S3 Object Lock in compliance mode with S3 bucket versioning enabled. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 265