A company recently experienced a malicious attack on its cloud-based environment. The company successfully contained and eradicated the attack. A security engineer is performing incident response…

Question

Options

• AIdentify the Regional cluster ARN for the database. Use the ARN to restore the Regional cluster
• BIdentify the Regional cluster ARN for the database. List snapshots that have been taken of the
• CList all snapshots that have been taken of all the company's RDS databases. Identify the
• DIdentify the Regional cluster ARN for the database. Use the ARN to restore the Regional cluster

• A
  75% (36)
• B
  4% (2)
• C
  6% (3)
• D
  15% (7)

Explanation

Amazon RDS supports point-in-time recovery (PITR) using automated backups within the configured retention window. According to the AWS Certified Security - Specialty Study Guide, PITR allows recovery to any second within the retention period, making it the most precise recovery method following a security incident. By restoring the database cluster to a point just before the attack occurred, such as 3:14 PM, the security engineer ensures that the restored database reflects the last known good state without including malicious changes. This method is more accurate than restoring from snapshots, which are created at fixed intervals and may not align with the exact recovery time. Options B and C rely on snapshot timing and may reintroduce compromised data. Option D restores to an arbitrary time and does not meet the requirement to recover to the last known good AWS documentation explicitly recommends point-in-time recovery for incident response scenarios that require precise restoration.

No community discussion yet for this question.