Which of the below mentioned options need not be enabled by the organization to achieve data security?

An organization has a statutory requirement to protect the data at rest for the S3 objects.

Which of the below mentioned options need not be enabled by the organization to achieve data security?
A . MFA delete for S3 objects
B . Client side encryption
C . Bucket versioning
D . Data replication

Answer: D

Explanation:

AWS S3 provides multiple options to achieve the protection of data at REST. The options include Permission (Policy), Encryption (Client and Server Side), Bucket Versioning and MFA based delete. The user can enable any of these options to achieve data protection. Data replication is an internal facility by AWS where S3 replicates each object across all the Availability Zones and the organization need not enable it in this case.

Reference: http://media.amazonwebservices.com/AWS_Security_Best_Practices.pdf