Exam AWS Certified Database - Specialty All Questions

View all questions & answers for the AWS Certified Database - Specialty exam

Exam AWS Certified Database - Specialty topic 1 question 170 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 170
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company uses an Amazon Redshift cluster to run its analytical workloads. Corporate policy requires that the company's data be encrypted at rest with customer managed keys. The company's disaster recovery plan requires that backups of the cluster be copied into another AWS Region on a regular basis.
How should a database specialist automate the process of backing up the cluster data in compliance with these policies?

A. Copy the AWS Key Management Service (AWS KMS) customer managed key from the source Region to the destination Region. Set up an AWS Glue job in the source Region to copy the latest snapshot of the Amazon Redshift cluster from the source Region to the destination Region. Use a time-based schedule in AWS Glue to run the job on a daily basis.
B. Create a new AWS Key Management Service (AWS KMS) customer managed key in the destination Region. Create a snapshot copy grant in the destination Region specifying the new key. In the source Region, configure cross-Region snapshots for the Amazon Redshift cluster specifying the destination Region, the snapshot copy grant, and retention periods for the snapshot.
C. Copy the AWS Key Management Service (AWS KMS) customer-managed key from the source Region to the destination Region. Create Amazon S3 buckets in each Region using the keys from their respective Regions. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function in the source Region to copy the latest snapshot to the S3 bucket in that Region. Configure S3 Cross-Region Replication to copy the snapshots to the destination Region, specifying the source and destination KMS key IDs in the replication configuration.
D. Use the same customer-supplied key materials to create a CMK with the same private key in the destination Region. Configure cross-Region snapshots in the source Region targeting the destination Region. Specify the corresponding CMK in the destination Region to encrypt the snapshot.

Show Suggested Answer

Suggested Answer: B 🗳️

by leunamE at Nov. 12, 2021, 1:55 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

toppic26

Highly Voted 3 years, 5 months ago

Answer is B: https://docs.aws.amazon.com/redshift/latest/mgmt/managing-snapshots-console.html#xregioncopy-kms-encrypted-snapshot

upvoted 11 times

...

backbencher2022

Most Recent 2 years, 1 month ago

Selected Answer: B

Answer is B - https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-db-encryption.html#configure-snapshot-copy-grant

upvoted 1 times

...

novice_expert

3 years ago

Selected Answer: B

new KMS CMK in the destination Region -> snapshot copy grant in the destination Region specifying the new key ->In the source Region, configure cross-Region snapshots for the Amazon Redshift cluster specifying - the destination Region, - the snapshot copy grant, - and retention periods for the snapshot.

upvoted 2 times

...

amitkhurana

3 years ago

Selected Answer: B

B is the right answer

upvoted 2 times

...

awsmonster

3 years, 3 months ago

Option B.

upvoted 1 times

...

leunamE

3 years, 6 months ago

Option B.

upvoted 3 times

...

Exam AWS Certified Database - Specialty All Questions

View all questions & answers for the AWS Certified Database - Specialty exam

Exam AWS Certified Database - Specialty topic 1 question 170 discussion

Comments

toppic26

backbencher2022

novice_expert

amitkhurana

awsmonster

leunamE

SY0-701