SCS-C02 · Question #20
SCS-C02 Question #20: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #20. The question stem and answer options stay visible for context.
Question
A company has recently recovered from a security incident that required the restoration of Amazon EC2 instances from snapshots. The company uses an AWS Key Management Service (AWS KMS) customer managed key to encrypt all Amazon Elastic Block Store (Amazon EBS) snapshots. The company performs a gap analysis of its disaster recovery procedures and backup strategies. A security engineer needs to implement a solution so that the company can recover the EC2 instances if the AWS account is compromised and the EBS snapshots are deleted. Which solution will meet this requirement?
Options
- ACreate a new Amazon S3 bucket. Use EBS lifecycle policies to move EBS snapshots to the new
- BUse AWS Systems Manager to distribute a configuration that backs up all attached disks to
- CCreate a new AWS account that has limited privileges. Allow the new account to access the KMS
- DUse AWS Backup to copy EBS snapshots to Amazon S3. Use S3 Object Lock to prevent deletion
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.