An organization uses a cloud-based backup solution with immutable storage to protect against ransomware. However, after a recent attack, an attacker with stolen administrator credentials was able to delete the backup data. Which of the following BEST explains why the backups were deleted?
Without a properly configured retention lock, even immutable storage may allow administrative deletions, defeating the purpose.
Why this answer
Option A is correct because true immutable storage prevents any deletion or modification, even by administrators, for a specified retention period. The fact that an admin could delete it indicates the immutability feature was misconfigured or not properly locked. Option B describes encryption at the source, but that would not allow deletion of existing backups.
Option C is irrelevant to deletion. Option D: versioning helps but does not prevent deletion if immutability is not configured.