1Z0-1072-25 Question 219
Select 2You are designing a new logging solution for your company's compliance needs. All logs must remain completely unchanged in the Standard tier for exactly one year (365 days) to meet regulatory requirements, and then automatically transition to Archive storage for long-term retention. Which two actions must you take to meet these requirements?
- A
Create a retention rule that enforces Write-Once-Read-Many (WORM) for 365 days on the bucket.
- B
Configure a lifecycle policy that transitions objects to the Archive tier after 365 days.
- C
Enable object versioning on the bucket to prevent accidental overwrites.
- D
Enable cross-region replication to store logs in a secondary region.
- E
Create multiple pre-authenticated requests for uploading logs.
Show answer and explanation
Correct answers: A, B
Explanation
To ensure logs are not modified for the first 365 days, you must set a retention rule on the bucket. This enforces WORM compliance for that period. Afterwards, you can configure a lifecycle policy that transitions objects to the Archive tier automatically. For more details, consult the Oracle Cloud Infrastructure documentation on 'Object Lock and Retention Rules' and 'Object Lifecycle Management.'
- A. Correct.
By creating a retention rule (also called Object Lock in some contexts) for the bucket, you enforce a WORM policy that prevents the logs from being modified or deleted for the specified retention period (365 days). This directly addresses the one-year immutability requirement.
- B. Correct.
A lifecycle policy that transitions objects to Archive storage after 365 days automatically moves the logs once they have passed the retention period, fulfilling the archiving requirement.
- C. Incorrect.
Object versioning helps maintain previous versions of updated or deleted objects, but it does not enforce a strict WORM policy to prevent modifications for compliance purposes.
- D. Incorrect.
Cross-region replication is useful for disaster recovery or redundancy, but it does not meet the requirement of ensuring immutability or automatically archiving logs after a specific time.
- E. Incorrect.
Pre-authenticated requests are used for granting time-limited access to objects and are unrelated to enforcing compliance or automatically archiving certified logs.