With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?

With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?
A . Deny Post. Put. and Delete on the bucket.
B . Enable server-side encryption on the bucket.
C . Enable Amazon S3 versioning on the bucket.
D . Enable snapshots on the bucket.

View Answer

Answer: C

Explanation:

Step-by-Step

Understand the Problem:

The threat of ransomware encrypting and holding company data hostage.

Need to protect an Amazon S3 bucket.

Analyze the Requirements:

Ensure that data in the S3 bucket is protected against unauthorized encryption or deletion.

Evaluate the Options:

Option A: Deny Post, Put, and Delete on the bucket.

Denying these actions would prevent any uploads or modifications to the bucket, making it unusable.

Option B: Enable server-side encryption on the bucket.

Server-side encryption protects data at rest but does not prevent the encryption of data by ransomware.

Option C: Enable Amazon S3 versioning on the bucket.

S3 versioning keeps multiple versions of an object in the bucket. If a file is overwritten or encrypted by ransomware, previous versions of the file can still be accessed.

Option D: Enable snapshots on the bucket.

Amazon S3 does not have a snapshot feature; this option is not applicable.

Select the Best Solution:

Option C: Enabling Amazon S3 versioning is the best solution as it allows access to previous versions

of objects, providing protection against ransomware encryption by retaining prior, unencrypted versions.

Reference: Amazon S3 Versioning

Best Practices for Protecting Data with Amazon S3

Enabling S3 versioning ensures that previous versions of objects are preserved, providing a safeguard against ransomware by allowing recovery of unencrypted versions of data.