S3 Object Lock and Glacier Vault Lock Quiz

What you'll be asked

1. Which S3 Object Lock mode prevents any user, including the root account, from deleting or overwriting an object for a fixed duration?
2. A company needs to store regulatory records in S3 for 7 years. They must ensure that even if a user has 's3:DeleteObject' permissions, they cannot delete the files. Which feature is most appropriate?
3. What is the primary difference between S3 Object Lock Legal Hold and a fixed retention period?
4. You have a Glacier Vault with a Vault Lock policy in place. You want to modify the policy to shorten the retention period because of a change in internal policy. What is the process?
5. An application is using S3 Object Lock in Governance mode. A user with 's3:BypassGovernanceRetention' permission attempts to delete a locked object. What happens?

Answers and explanations come after you submit.