SCS-C02 · Question #201
SCS-C02 Question #201: Real Exam Question with Answer & Explanation
The correct answer is A: Use AWS Backup to create backups of the EC2 instances and S3 buckets every hour. Create. It meets the RPO of 1 hour by creating backups of the EC2 instances and S3 buckets every hour. It also uses AWS CloudFormation templates to replicate the existing architecture components and AWS CodeCommit to store the templates and the application configuration code. This way, t
Question
A company uses Amazon EC2 instances to host frontend services behind an Application Load Balancer. Amazon Elastic Block Store (Amazon EBS) volumes are attached to the EC2 instances. The company uses Amazon S3 buckets to store large files for images and music. The company has implemented a security architecture for AWS to prevent, identify, and isolate potential ransomware attacks. The company now wants to further reduce risk. A security engineer must develop a disaster recovery solution that can recover to normal operations if an attacker bypasses preventive and detective controls. The solution must meet an RPO of 1 hour. Which solution will meet these requirements?
Options
- AUse AWS Backup to create backups of the EC2 instances and S3 buckets every hour. Create
- BUse AWS Backup to create backups of the EBS volumes and S3 objects every day. Use Amazon
- CUse Amazon Security Lake to create a centralized data lake for AWS CloudTrail logs and VPC
- DCreate EBS snapshots every 4 hours Enable Amazon GuardDuty Malware Protection. Create
Explanation
It meets the RPO of 1 hour by creating backups of the EC2 instances and S3 buckets every hour. It also uses AWS CloudFormation templates to replicate the existing architecture components and AWS CodeCommit to store the templates and the application configuration code. This way, the security engineer can quickly restore the environment in case of a ransomware attack.
Community Discussion
No community discussion yet for this question.