Exam AWS Certified SysOps Administrator - Associate topic 1 question 149 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 149
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company’s AWS accounts.

Which solution will meet these requirements in the MOST operationally efficient way?

A. Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.
B. Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance.
C. Use AWS Backup in the management account to deploy policies for all accounts and resources.
D. Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.

Show Suggested Answer

Suggested Answer: C 🗳️

by Liongeek at Nov. 17, 2022, 8:48 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Christina666

11 months, 2 weeks ago

Selected Answer: C

Backup role-based access control With AWS Backup, a backup operator can back up all supported resources on AWS without requiring the backup operator to have direct access to those resources. This provides a separation of control where resource owners can't impact the retention of backups, and backup operators can't mutate or exfiltrate data. You can set resource-based access policies on backup vaults. With resource-based access policies, you can control access to backups in a backup vault across all users, rather than having to define permissions for each user.

upvoted 3 times

...

Gomer

1 year, 2 months ago

Selected Answer: C

"You can delegate backup policy management in AWS Organizations and cross account monitoring in AWS Backup. This enables delegating backup management to a dedicated backup administration account, removing the need for member accounts to access management accounts for backup administration. Delegated backup administrators can create and manage backup policies and monitor backup activity across accounts. Organization-wide backup administration delegation through AWS Organizations enables securely centralized backup management at scale." https://aws.amazon.com/backup/features/

upvoted 1 times

...

Xelnak

1 year, 7 months ago

Selected Answer: C

https://aws.amazon.com/backup/features/ AWS Backup now supports cross-account backup, enabling you to securely copy your backups across your AWS accounts within your AWS organizations.

upvoted 4 times

...

Liongeek

1 year, 7 months ago

Ans C Tagging isn't enough to backup the instances. You'll also need a backup plan and rules.

upvoted 1 times

...