SOA-C02 · Question #724
A company must automate daily incremental backups of any Amazon Elastic Block Store (Amazon EBS) volume that is marked with a Lifecycle: Production tag. The company also must prevent users from using
The correct answer is A. Create a daily snapshot of all EBS volumes by using AWS Backup. Specify Lifecycle as the tag. AWS Backup can automatically create daily incremental EBS snapshots by tag (Lifecycle=Production). Those backups are stored in a backup vault, so users with broad ec2:* permissions cannot delete them with ec2:DeleteSnapshot; deletion is governed by AWS Backup permissions instead.
Question
A company must automate daily incremental backups of any Amazon Elastic Block Store (Amazon EBS) volume that is marked with a Lifecycle: Production tag. The company also must prevent users from using ec2:* permissions to delete any of these production snapshots. Which solution will meet these requirements?
Options
- ACreate a daily snapshot of all EBS volumes by using AWS Backup. Specify Lifecycle as the tag
- BCreate a daily snapshot of all EBS volumes by using Amazon Data Lifecycle Manager. Specify
- CCreate automatic remediation rules in AWS Trusted Advisor to deny any delete actions on the EBS
- DCreate a daily Amazon Machine Image (AMI) of any Amazon EC2 instances by using Amazon
How the community answered
(53 responses)- A81% (43)
- B11% (6)
- C2% (1)
- D6% (3)
Explanation
AWS Backup can automatically create daily incremental EBS snapshots by tag (Lifecycle=Production). Those backups are stored in a backup vault, so users with broad ec2:* permissions cannot delete them with ec2:DeleteSnapshot; deletion is governed by AWS Backup permissions instead. This satisfies both automation and protection requirements.
Topics
Community Discussion
No community discussion yet for this question.