Ultimate access to all questions.
A company's application utilizes numerous Amazon DynamoDB tables for data storage. Auditors have identified that these tables do not adhere to the company's data protection policies. According to the company's retention policy, all data must be backed up on two specific dates each month: at midnight on the 15th and the 25th. Additionally, these backups must be retained for a period of three months. What are the appropriate steps for a security engineer to ensure compliance with these backup and retention requirements? (Select two options.)
Explanation:
Option C and D are the correct answers. Using AWS Backup to create a backup plan (option C) allows for a managed, automated way to handle backups with a defined retention period of 3 months, which meets the company's requirements. Setting the backup frequency using a cron schedule expression (option D) ensures that backups are taken at the specified times (midnight on the 15th and 25th of each month). This approach aligns with the company's policies and ensures compliance with their data protection requirements. The other options either do not fit the need for automated, scheduled backups (B, E) or would need additional configuration for long-term retention (A).