Security World 3 · Lock and Key · Stage 6

Hold the Line

Objects as tokens under delete and overwrite attempts: which protection holds, for how long, and against whom.

  • S3 Versioning and MFA delete
  • S3 Object Lock
  • Legal holds
  • Vault locks
  • AWS Backup
  • Code signing
Domain
Security
World
Security World 3: Lock and Key (Professional)
Game type
Solution board: Drop services into each row's slots, then run records through them.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.3: Determine appropriate data security controls
  • SCS-C03Skill 5.2.2: Design and configure mechanisms to protect data integrity (for example, S3 Object Lock, S3 Glacier Vault Lock, versioning, digital code signing, file validation); Skill 5.2.3: Design automatic lifecycle management and retention solutions for data (for example, S3 Lifecycle policies, S3 Object Lock, Amazon EFS Lifecycle policies, Amazon FSx for Lustre backup policies); Skill 5.2.4: Design and configure secure data replication and backup solutions (for example, Amazon Data Lifecycle Manager, AWS Backup, ransomware protection, AWS DataSync)