SAP-C02 Question 92
Select 4A large enterprise needs a backup and disaster recovery solution for its on-premises databases. The solution must ensure that the backups are stored securely, are easily restorable in the event of data loss, and meet regulatory compliance requirements for encryption and durability. Which combination of AWS services and features is the most appropriate for this use case?
- A
Use AWS Storage Gateway to replicate database backups to Amazon S3 with a lifecycle policy to transition them to Amazon S3 Glacier for long-term storage.
- B
Enable Amazon S3 Versioning and Object Lock for regulatory compliance and immutability of backups.
- C
Use Amazon RDS with automated backups to store on-premises database backups in Amazon RDS snapshots.
- D
Encrypt backups using AWS Key Management Service (KMS) before storing them in Amazon S3.
- E
Use AWS Backup to automate and centrally manage backups for the on-premises databases and replicate them to Amazon S3.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To meet the requirements of secure, durable, and regulatory-compliant backups for on-premises databases, the enterprise can use AWS Storage Gateway to replicate backups to Amazon S3 and transition them to Amazon S3 Glacier for long-term storage. Enabling S3 Versioning and Object Lock ensures immutability and compliance. Encrypting the backups with KMS meets encryption requirements. AWS Backup simplifies and automates the management and replication of backups, making it an essential part of the solution.
- A. Correct.
Correct: AWS Storage Gateway can be used to replicate on-premises backups to Amazon S3, and lifecycle policies can transition them to S3 Glacier for cost-effective long-term storage. This ensures durability and compliance.
- B. Correct.
Correct: Amazon S3 Versioning and Object Lock provide immutability and version control, meeting regulatory compliance requirements for secure backups.
- C. Incorrect.
Incorrect: Amazon RDS is used for managed relational databases on AWS, not for storing on-premises database backups. This option is not applicable to the scenario.
- D. Correct.
Correct: AWS Key Management Service (KMS) can encrypt backups before storing them in Amazon S3, ensuring security and compliance with encryption requirements.
- E. Correct.
Correct: AWS Backup provides a centralized solution to automate and manage backups for on-premises databases, with replication to Amazon S3 for durability and availability.