DEA-C01 Data Store Management Practice Question
A media company stores video files in Amazon S3 buckets organized by content type. The company has a requirement to automatically archive files that are older than 90 days to Amazon S3 Glacier Deep Archive to reduce costs. However, the company wants to retain the ability to restore files within 12 hours if needed. The data engineer creates an S3 Lifecycle policy to transition objects to Glacier Deep Archive after 90 days. After deploying the policy, the engineer notices that the storage costs have not decreased significantly. On reviewing the bucket metrics, the engineer sees that many objects are being deleted directly by users before the lifecycle policy takes effect. The company needs to enforce the lifecycle policy and prevent premature deletions. What should the data engineer do to enforce the lifecycle policy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable S3 Versioning on the bucket and add a lifecycle rule to transition noncurrent versions to Glacier Deep Archive after 90 days.
Enabling S3 Versioning ensures that when users delete objects, a delete marker is created instead of permanently deleting the object. The lifecycle rule can then transition the noncurrent versions (the original objects) to Glacier Deep Archive after 90 days, preserving the data while reducing costs. Option A is incorrect because Object Lock with GOVERNANCE mode prevents any deletion or overwrite for the retention period, which may interfere with normal operations and does not address the lifecycle policy enforcement. Option C is incorrect because MFA Delete provides additional security for delete operations but does not prevent the deletion itself; it only requires MFA authentication. Option D is incorrect because S3 Glacier Select is used to query archived data, not for lifecycle management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Apply an S3 Object Lock retention policy with a default retention mode of GOVERNANCE and a retention period of 90 days.
Why it's wrong here
Object Lock prevents any deletion or modification during the retention period, which may conflict with business needs.
- ✓
Enable S3 Versioning on the bucket and add a lifecycle rule to transition noncurrent versions to Glacier Deep Archive after 90 days.
Why this is correct
Versioning preserves deleted objects as noncurrent versions, which can then be transitioned by lifecycle rules.
- ✗
Enable S3 Multi-Factor Authentication (MFA) Delete on the bucket to require MFA for all delete operations.
Why it's wrong here
MFA Delete does not prevent deletions; it adds an authentication step.
- ✗
Use S3 Glacier Select to query the objects and restore them if needed.
Why it's wrong here
Glacier Select is for querying data in place, not for lifecycle management.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
This DEA-C01 question is part of Courseiva's 1,711-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.