AWS Certified Solutions Architect - Professional
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company utilizes an Amazon Elastic File System (Amazon EFS) for document storage and management, which is encrypted using an AWS Key Management Service (AWS KMS) key. This file system is mounted on an Amazon EC2 instance running proprietary software. The company has set up automatic backups for the file system, utilizing the AWS Backup default backup plan. A solutions architect is tasked with ensuring that deleted documents can be recovered within a Recovery Point Objective (RPO) of 100 minutes. Which solution will fulfill these requirements?
A
Create a new IAM role, establish a new backup plan, utilize the new IAM role for creating backups, update the KMS key policy to grant the new IAM role access to the key, and implement an hourly backup schedule for the file system.
B
Develop a new backup plan, update the KMS key policy to permit the AWSServiceRoleForBackup IAM role to use the key, and configure a custom cron expression to execute a backup of the file system every 30 minutes.
C
Generate a new IAM role, apply the existing backup plan, update the KMS key policy to enable the new IAM role to use the key, and activate continuous backups for point-in-time recovery.
D
Employ the existing backup plan, update the KMS key policy to allow the AWSServiceRoleForBackup IAM role to use the key, and enable Cross-Region Replication for the file system.