SAP-C02 · Question #654
A company is migrating an application from on-premises infrastructure to the AWS Cloud. During migration design meetings, the company expressed concerns about the availability and recovery options…
The correct answer is C. Create an FSx for Windows File Server file system in the DR Region. Establish connectivity. The company needs to design a disaster recovery solution for Amazon FSx for Windows File Server, replicating sensitive data to another AWS Region without using the public internet and utilizing managed services.
Question
A company is migrating an application from on-premises infrastructure to the AWS Cloud. During migration design meetings, the company expressed concerns about the availability and recovery options for its legacy Windows file server. The file server contains sensitive business-critical data that cannot be recreated in the event of data corruption or data loss. According to compliance requirements, the data must not travel across the public internet. The company wants to move to AWS managed services where possible. The company decides to store the data in an Amazon FSx for Windows File Server file system. A solutions architect must design a solution that copies the data to another AWS Region for disaster recovery (DR) purposes. Which solution will meet these requirements?
Options
- ACreate a destination Amazon S3 bucket in the DR Region. Establish connectivity between the
- BCreate an FSx for Windows File Server file system in the DR Region. Establish connectivity
- CCreate an FSx for Windows File Server file system in the DR Region. Establish connectivity
- DCreate an FSx for Windows File Server file system in the DR Region. Establish connectivity
How the community answered
(45 responses)- A7% (3)
- B2% (1)
- C80% (36)
- D11% (5)
Why each option
The company needs to design a disaster recovery solution for Amazon FSx for Windows File Server, replicating sensitive data to another AWS Region without using the public internet and utilizing managed services.
Copying data to Amazon S3 does not replicate the FSx for Windows File Server file system itself, which is required for a like-for-like DR target.
While FSx and Direct Connect private VIF are correct, using `robocopy` or `rsync` is a manual and less managed approach for large-scale, ongoing replication between managed services compared to AWS DataSync.
Creating an FSx for Windows File Server file system in the DR Region and establishing a Direct Connect private VIF for connectivity allows for secure, private network communication between Regions. Utilizing AWS DataSync to copy data from the primary FSx file system to the DR FSx file system ensures efficient, managed, and secure data transfer for disaster recovery without public internet exposure.
Using `robocopy` or `rsync` is less managed, and while a Direct Connect public VIF uses the private circuit, it still routes to public endpoints, which may not fully meet strict 'data must not travel across the public internet' compliance requirements when a private VIF and managed service like DataSync are available.
Concept tested: FSx for Windows File Server cross-region DR with DataSync
Source: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/data-migration.html
Community Discussion
No community discussion yet for this question.