Question 29: You are working for an Investment Bank which has a farm of application servers. All the log files are having below requirements.

- Should be available upto 6 months for applying analytics actively, on daily basis.

- After 6 month they are still accessed like once in a month for upto 18 months.

- You need to keep this data at least for 5 years to meet the regulatory requirement.

Which of the following option will have correct solution for given requirement?

1. You will be storing this data in an S3 bucket for 18 months and set the lifecycle policy. So that it can be moved to AWS Glacier after 18 months.

2. You will be storing this data in an EBS volume for 6 months and then moved data to S3 bucket for next 12 months and set the lifecycle policy. So that it can be moved to AWS Glacier after 18 months

and will be automatically deleted after 5 years.

3. You will be storing data in S3 bucket and enable the Deny Vault Lock policy so that data which has age less than 5 years cannot be deleted.

4. You will be storing log files in S3 Standard storage class and enable the lifecycle policy. In the lifecycle policy you will define that data after 6 month should be moved to Standard IA. Also it

should be deleted after 18 months from this Standard IA storage. At the same time you will be storing this data to AWS Glacier with a Delete Deny vault lock policy for archives data upto 5 years.

Correct Answer : 4 Exp : It is clearly given in the question with three requirements. You need to set lifecycle policy when you want to move data automatically from one storage class to another storage class, when

data stored in S3 bucket, reaches its defines age.

Upto 6 month you will keep data in standard S3 storage class from there data can be easily accessed every day. After 6 month data needs to be access infrequently, so you will be moving it to Standard-IA storage. But

this is a cheaper than standard S3 storage.

And at the same time lifecycle policy will move data from Standard-IA storage to Glacier after 18 months. And we will enable Deny Delete vault lock so that it cannot be deleted for 5 years, and after that it would be

deleted automatically.

4