Hard1 markMultiple Choice
Domain 2.2: Business ContinuityBusiness ContinuityAWS BackupSecurity

AWS SAP-C02 · Question 07 · Domain 2.2: Business Continuity

A financial institution requires that all EBS volumes, S3 buckets, and RDS databases are backed up daily. Backups must be retained for 7 years and protected against accidental deletion, even by administrators. What is the BEST solution?

Answer options:

A.

Write a Lambda function to create snapshots and store them in S3 Glacier.

B.

Use AWS Backup with a backup vault configured with Vault Lock in compliance mode.

C.

Enable automated backups on all services and use SCPs to prevent deletion.

D.

Use S3 Object Lock for S3, and manual snapshots for EBS and RDS.

How to approach this question

Look for centralized backup management with WORM (Write Once Read Many) capabilities.

Full Answer

B.Use AWS Backup with a backup vault configured with Vault Lock in compliance mode.✓ Correct
AWS Backup Vault Lock in compliance mode provides immutable backups that cannot be deleted before their retention period expires.

Common mistakes

Relying solely on SCPs, which can be modified by highly privileged users.

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 3

75 questions · hints · full answers · grading

More questions from this exam