Once enabled, which bucket activities will require MFA authentication?
(Choose two.)
Permanently removing an object version from the bucket
Disabling default object encryption for the bucket
Listing all versions of deleted objects in the bucket
Suspending versioning on the bucket
Enabling MFA Add on the bucket
Explanations:
MFA Delete requires MFA authentication when permanently removing object versions from the bucket, to prevent accidental or malicious deletions.
Disabling default object encryption does not require MFA authentication and is not affected by MFA Delete settings.
Listing versions of deleted objects does not require MFA authentication, even with MFA Delete enabled.
Suspending versioning on the bucket requires MFA authentication under MFA Delete, to prevent accidental suspension of versioning.
Enabling MFA Add is not a valid action and does not relate to MFA Delete functionality.
I suspect that the answer is:
Permanently removing an object version from the bucket