Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 563 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 563
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company wants to migrate its 1 PB on-premises image repository to AWS. The images will be used by a serverless web application images stored in the repository are rarely accessed, but they must be immediately available. Additionally, the images must be encrypted at rest and protected from accidental deletion.
Which solution meets these requirements?

A. Implement client-side encryption and store the images in an Amazon S3 Glacier vault. Set a vault lock to prevent accidental deletion.
B. Store the images in an Amazon S3 bucket in the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Enable versioning, default encryption, and MFA Delete on the S3 bucket.
C. Store the images in an Amazon FSx for Windows File Server file share. Configure the Amazon FSx file share to use an AWS Key Management Service (AWS KMS) customer master key (CMK) to encrypt the images in the file share. Use NTFS permission sets on the images to prevent accidental deletion.
D. Store the Images in an Amazon Elastic File System (Amazon EFS) file share in the Infrequent Access storage class. Configure the EFS file share to use an AWS Key Management Service (AWS KMS) customer master key (CMK) to encrypt the images in the file share. Use NFS permission sets on the images to prevent accidental deletion.

Show Suggested Answer

Suggested Answer: B 🗳️

by hmc929 at Dec. 29, 2021, 10:18 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

attila9778

2 years, 6 months ago

Selected Answer: A

Keyword: "rarely accessed" https://aws.amazon.com/s3/storage-classes/ for Glacier Instant Rerieval says: "for long-lived data that is rarely accessed"

upvoted 1 times

...

ns1231

2 years, 10 months ago

Selected Answer: B

Key word - not frequently accessed

upvoted 1 times

...

Angrydove

2 years, 11 months ago

I think D can be an alternative. Lambda can mount EFS and EFS has other necessary options. and even more EFS have faster access than S3. Why B instead of D?

upvoted 1 times

derekurizar

2 years, 11 months ago

Why will you pay for EFS (Which is more expensive) if the data will be infrequently accessed? That is the key... for that reason S3 is better and will be faster too

upvoted 1 times

...