How can these requirements be met?

An application generates audit logs of operational activities. Compliance requirements mandate that the application retain the logs for 5 years.

How can these requirements be met?
A . Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA Delete) on the bucket.
B . Save the logs in an Amazon EFS volume and use Network File System version 4 (NFSv4) locking with the volume.
C . Save the logs in an Amazon Glacier vault and use the Vault Lock feature.
D . Save the logs in an Amazon EBS volume and take monthly snapshots.

Answer: C

Explanation:

Amazon Glacier, which enables long-term storage of mission-critical data, has added Vault Lock. This new feature allows you to lock your vault with a variety of compliance controls that are designed to support such long-term records retention.