Medium1 markMultiple Choice
Domain 2.2: Business ContinuityBackupSecurityRansomware

AWS SAP-C02 · Question 07 · Domain 2.2: Business Continuity

An enterprise needs to back up Amazon EC2 instances, Amazon RDS databases, and Amazon EFS file systems across multiple AWS Regions. The backups must be immutable to protect against ransomware. Which solution is MOST operationally efficient?

Answer options:

A.

Write custom Lambda scripts to create snapshots and copy them to an S3 bucket with Object Lock.

B.

Use AWS Backup with cross-region copy and enable AWS Backup Vault Lock in compliance mode.

C.

Use Data Lifecycle Manager (DLM) for EC2 and RDS, and AWS DataSync for EFS.

D.

Enable automated backups on all services and use AWS Config to verify they are running.

How to approach this question

Look for the centralized backup service (AWS Backup) and its immutability feature (Vault Lock).

Full Answer

B.Use AWS Backup with cross-region copy and enable AWS Backup Vault Lock in compliance mode.✓ Correct
AWS Backup provides a centralized way to manage backups. Vault Lock in compliance mode prevents anyone, including the root user, from deleting backups.

Common mistakes

Choosing custom Lambda scripts which violate the 'operationally efficient' requirement.

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 1

75 questions · hints · full answers · grading

More questions from this exam