1Z0-1072-25 Question 236
Select 3Your company stores transaction logs in an Oracle Cloud Infrastructure Object Storage bucket for compliance. You must retain these logs for 90 days to meet regulatory requirements, automatically archive them after 30 days to reduce costs, and ensure you can restore older versions if logs are accidentally overwritten or deleted. Which three configurations are needed to fulfill these requirements?
- A
Enable Object Storage versioning on the bucket
- B
Enable server-side encryption using your own customer-managed keys
- C
Create a retention rule that locks objects for 90 days
- D
Create an Object Lifecycle policy to move objects to Archive class after 30 days
- E
Make the bucket publicly accessible
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet the scenario requirements, you should enable object versioning to restore overwritten or deleted objects (Option 1). Then, create a retention rule that locks objects for the required compliance duration (90 days) (Option 3), ensuring they cannot be removed prematurely. Finally, configure a lifecycle policy to automatically transition objects to the Archive tier after 30 days to optimize storage costs (Option 4). For more details, refer to the Oracle documentation on Object Storage versioning, retention rules, and lifecycle policies.
- A. Correct.
Option 1: Correct. Enabling Object Storage versioning allows you to preserve, retrieve, and manage multiple versions of an object. If an object is overwritten or deleted, you can restore the older version, meeting the requirement for accidental overwrites or deletions.
- B. Incorrect.
Option 2: Incorrect. While server-side encryption is recommended for data security, it does not directly address the specific requirements of retention, archiving, or version recovery. Using your own customer-managed keys is a good practice, but it is not part of the essential solution for this scenario.
- C. Correct.
Option 3: Correct. A retention rule locking objects for 90 days ensures that no one can delete them before the compliance period is over. This satisfies the regulatory requirement to keep the logs for 90 days.
- D. Correct.
Option 4: Correct. An Object Lifecycle policy to transition objects to the Archive storage tier after 30 days helps reduce cost and meets the requirement to archive older logs while still allowing restoration if necessary.
- E. Incorrect.
Option 5: Incorrect. Making the bucket publicly accessible would expose sensitive data to the internet and is not recommended for compliance use cases.