🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 9 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your company is migrating legal hold documents to AWS. Compliance rules require that each object be stored redundantly across at least three Availability Zones, protected from accidental or malicious deletion, and recoverable even if the customer loses access to its own encryption keys. Which solution meets these requirements while keeping storage costs to a minimum?

  • Store the data in an S3 One Zone-IA bucket with versioning enabled and default encryption set to SSE-KMS using a customer-managed CMK.

  • Create an Amazon S3 Standard bucket, enable versioning and MFA Delete, and set default server-side encryption to SSE-S3.

  • Deploy encrypted EBS volumes in an Auto Scaling group spanning three AZs and schedule daily snapshots to Amazon S3 Glacier Deep Archive.

  • Place the documents on Amazon EFS Standard with lifecycle management to Infrequent Access; rely on POSIX permissions for protection.

ISC2 Systems Security Certified Practitioner (SSCP)
Systems and Application Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot