Amazon Exam SCS-C02 Topic 8 Question 24 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 24
Topic #: 8

A company is storing data in Amazon S3 Glacier. A security engineer implemented a new vault lock policy for 10 TB of data and called the initiate-vault-lock operation 12 hours ago. The audit team identified a typo in the policy that is allowing unintended access to the vault.

What is the MOST cost-effective way to correct this error?

ACall the abort-vault-lock operation. Update the policy. Call the initiate-vault-lock operation again.

BCopy the vault data to a new S3 bucket. Delete the vault. Create a new vault with the data.

CUpdate the policy to keep the vault lock in place

DUpdate the policy. Call the initiate-vault-lock operation again to apply the new policy.

Show Suggested Answer

Suggested Answer: A

The most cost-effective way to correct a typo in a vault lock policy during the 24-hour initiation period is to call the abort-vault-lock operation. This action stops the vault lock process, allowing the security engineer to correct the policy and re-initiate the vault lock with the corrected policy. This approach avoids the need for data transfer or creating a new vault, thus minimizing costs and operational overhead.

by Agustin at Jul 18, 2024, 09:13 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Van

3 days ago

Option C? Are you kidding me? That's just sweeping the problem under the rug. Nah, D is definitely the way to go, clean and simple.

upvoted 0 times

...

Leah

4 days ago

Haha, someone's got some explaining to do for that typo! I'd go with D, gotta love those AWS CLI commands, am I right?

upvoted 0 times

...

Ailene

5 days ago

This is a tricky one, but I reckon D is the most efficient way to fix the issue. Calling abort-vault-lock and then re-initiating it just seems like a waste of time and resources.

upvoted 0 times

...

Lili

15 days ago

Option B sounds like a lot of work and unnecessary data transfer. I'd rather go with the simpler solution of just updating the policy and reapplying it.

upvoted 0 times

Otis

4 days ago

A: I agree, option D seems like the most efficient way to correct the error.

upvoted 0 times

...

Glory

19 days ago

I see your point, Vincent. However, updating the policy and reapplying the vault lock might be quicker and more efficient in the long run.

upvoted 0 times

...

Corazon

20 days ago

Hmm, I think option D is the way to go. Updating the policy and calling the initiate-vault-lock operation again is the most cost-effective approach, without having to copy all the data or delete the vault.

upvoted 0 times