Exam AWS Certified SysOps Administrator - Associate topic 1 question 218 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 218
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company is expanding globally and needs to back up data on Amazon Elastic Block Store (Amazon EBS) volumes to a different AWS Region. Most of the EBS volumes that store the data are encrypted, but some of the EBS volumes are unencrypted. The company needs the backup data from all the EBS volumes to be encrypted.

Which solution will meet these requirements with the LEAST management overhead?

A. Configure a lifecycle policy in Amazon Data Lifecycle Manager (Amazon DLM) to create the EBS volume snapshots with cross-Region backups enabled. Encrypt the snapshot copies by using AWS Key Management Service (AWS KMS).
B. Create a point-in-time snapshot of the EBS volumes. When the snapshot status is COMPLETED, copy the snapshots to another Region and set the Encrypted parameter to False.
C. Create a point-in-time snapshot of the EBS volumes. Copy the snapshots to an Amazon S3 bucket that uses server-side encryption. Turn on S3 Cross-Region Replication on the S3 bucket.
D. Schedule an AWS Lambda function with the Python runtime. Configure the Lambda function to create the EBS volume snapshots, encrypt the unencrypted snapshots, and copy the snapshots to another Region.

Show Suggested Answer

Suggested Answer: A 🗳️

by zolthar_z at Jan. 3, 2023, 3:04 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Christina666

Highly Voted 1 year, 6 months ago

Selected Answer: A

Option A (Configure a lifecycle policy in Amazon Data Lifecycle Manager (Amazon DLM) to create the EBS volume snapshots with cross-Region backups enabled. Encrypt the snapshot copies by using AWS Key Management Service (AWS KMS)) is the most efficient and least management-intensive option. Amazon Data Lifecycle Manager (DLM) provides an automated way to create and manage EBS volume snapshots according to defined policies. By configuring a DLM lifecycle policy, you can specify cross-Region backups, which means that EBS volume snapshots will be copied to another AWS Region automatically. Additionally, you can enable encryption for the copied snapshots by using AWS Key Management Service (AWS KMS), ensuring that all backup data is encrypted as required.

upvoted 5 times

jipark

1 year, 6 months ago

"cross region EBS" -> Amazon Data Lifecycle Manager (DLM)

upvoted 1 times

...

johnson_chao

Most Recent 10 months, 3 weeks ago

Selected Answer: A

Answer is A ref : https://aws.amazon.com/ebs/data-lifecycle-manager/?nc1=h_ls

upvoted 2 times

...

Vivec

1 year, 11 months ago

Selected Answer: A

To create cross-Region backups of EBS volumes with encryption, Amazon Data Lifecycle Manager (Amazon DLM) can be used. With Amazon DLM, it is possible to automate the creation, retention, and deletion of EBS volume snapshots. In this scenario, a lifecycle policy can be configured to create EBS volume snapshots with cross-Region backups enabled. The snapshot copies can be encrypted using AWS Key Management Service (AWS KMS).

upvoted 2 times

...