nerdexam
AmazonAmazon

DBS-C01 · Question #317

DBS-C01 Question #317: Real Exam Question with Answer & Explanation

The correct answer is B: Create a new AWS Key Management Service (AWS KMS) customer managed key in the main. https://repost.aws/knowledge-center/share-encrypted-rds-snapshot-kms-key

Submitted by mike_84· Mar 6, 2026Deployment and Migration

Question

A company wants to use AWS Organizations to create isolated accounts for different teams and functionality. The company's database administrator needs to copy a DB instance from the main account in the us-east-1 Region to a new test account in the us-west-2 Region. The database administrator has already taken a snapshot of the encrypted Amazon RDS for PostgreSQL source DB instance in the main account. Which combination of steps must the database administrator take to copy the snapshot to the new account? (Choose three.)

Options

  • ACreate a new AWS Key Management Service (AWS KMS) customer managed key in the main
  • BCreate a new AWS Key Management Service (AWS KMS) customer managed key in the main
  • CCopy the snapshot of the source DB instance to us-west-2 by using the AWS Key Management
  • DCopy the snapshot of the source DB instance to the test account in us-east-1. Switch to the test
  • EIn the test account, copy the shared snapshot to create a final snapshot. Use the final snapshot to
  • FIn the test account, copy the shared snapshot by using the copied AWS Key Management

Explanation

https://repost.aws/knowledge-center/share-encrypted-rds-snapshot-kms-key

Topics

#cross-account snapshot#cross-region copy#KMS encryption#RDS PostgreSQL snapshots

Community Discussion

No community discussion yet for this question.

Full DBS-C01 PracticeBrowse All DBS-C01 Questions