AWS Certified Data Engineer - Associate DEA-C01 — Topic 1 Question 209

Question

A company uses AWS Key Management Service (AWS KMS) to encrypt an Amazon Redshift cluster. The company wants to configure a cross-Region snapshot of the Redshift cluster as part of disaster recovery (DR) strategy. A data engineer needs to use the AWS CLI to create the cross-Region snapshot. Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Create a KMS key and configure a snapshot copy grant in the source AWS Region. Option C: In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the source AWS Region. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Data Engineer - Associate DEA-C01 — Question 209