ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 386 - SAA-C03 discussion

Report
Export

A company needs to retain its AWS CloudTrail logs for 3 years. The company is enforcing CloudTrail across a set of AWS accounts by using AWS Organizations from the parent account. The CloudTrail target S3 bucket is configured with S3 Versioning enabled. An S3 Lifecycle policy is in place to delete current objects after 3 years.

After the fourth year of use of the S3 bucket, the S3 bucket metrics show that the number of objects has continued to rise. However, the number of new CloudTrail logs that are delivered to the S3 bucket has remained consistent. Which solution will delete objects that are older than 3 years in the MOST cost-effective manner?

A.
Configure the organization’s centralized CloudTrail trail to expire objects after 3 years.
Answers
A.
Configure the organization’s centralized CloudTrail trail to expire objects after 3 years.
B.
Configure the S3 Lifecycle policy to delete previous versions as well as current versions.
Answers
B.
Configure the S3 Lifecycle policy to delete previous versions as well as current versions.
C.
Create an AWS Lambda function to enumerate and delete objects from Amazon S3 that are older than 3 years.
Answers
C.
Create an AWS Lambda function to enumerate and delete objects from Amazon S3 that are older than 3 years.
D.
Configure the parent account as the owner of all objects that are delivered to the S3 bucket.
Answers
D.
Configure the parent account as the owner of all objects that are delivered to the S3 bucket.
Suggested answer: B

Explanation:

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/best-practicessecurity.html#:~:text=The%20CloudTrail%20trail,time%20has%20passed.

asked 16/09/2024
Marcos Losa Torviso
53 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first