SCS-C02 Data Protection Practice Question

Correct answer & explanation

Options D and E are correct. MFA Delete adds an extra authentication factor for delete operations, providing protection against accidental or unauthorized deletion. S3 Versioning allows recovery of deleted or overwritten objects by preserving previous versions. Option A is incorrect because S3 Object Lock with retention mode prevents object deletion or overwrite for a fixed period, but it is not specifically designed to protect against accidental deletion; it is more for compliance. Option B is incorrect because cross-region replication replicates objects to another bucket, but it does not prevent deletion in the source bucket; it only creates copies. Option C is incorrect because a bucket policy that denies s3:DeleteObject for all principals would prevent all delete operations, which is overly restrictive and not a practical solution for protecting against accidental deletion while still allowing necessary administrative actions.