S3 Glacier Vault Lock for WORM Compliance
A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations. Which feature of Amazon S3 can the company use to meet this requirement?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests knowledge of specific AWS storage controls; the common trap is confusing general access policies or versioning with actual WORM enforcement mechanisms.
This question tests the identification of Amazon S3 features that enforce Write-Once, Read-Many (WORM) compliance. S3 Glacier Vault Lock is the correct solution for ensuring data immutability.
Learners often select S3 Versioning, assuming it prevents deletion, but versioning allows new versions to be created and old ones deleted unless combined with other strict policies.
Community Discussion (5 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
S3 Glacier Vault Lock provides a WORM (Write Once, Read Many) model by allowing you to set a vault lock policy that cannot be changed once deployed. This ensures that archived documents cannot be modified or deleted for a specified retention period, satisfying legal and compliance obligations.Why the Other Options Are Wrong
S3 Versioning maintains multiple copies of an object but does not inherently prevent deletion or modification of existing versions. S3 bucket policies control access permissions but do not enforce immutability on their own. MFA Delete adds a security layer for deletions but does not provide the write-once guarantee required for compliance archives.Community Comment Notes
The community consensus strongly supports C. Users like Supercell and Kilobay1 note that Glacier Vault Lock specifically enforces the WORM model for regulatory compliance. While one user suggested bucket policy, it lacks the immutable locking feature provided by Vault Lock.Exam Strategy
When asked about 'immutable' or 'compliance' storage, look for services designed for long-term archiving like Glacier with Lock features. Distinguish between access control (policies) and data integrity/enforcement (Vault Lock).
Frequently Asked Questions
Why isn't S3 Versioning sufficient for WORM?
Versioning allows objects to be overwritten or deleted if permissions allow. It does not provide the cryptographic immutability or locked retention periods required for true WORM compliance.
Can I use S3 Object Lock instead?
Yes, S3 Object Lock also provides WORM capabilities for S3 buckets. However, among the options provided, Glacier Vault Lock is the specific service mentioned for archival compliance in this context.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →