AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company needs to store data from its healthcare application. The application's data frequently changes. A new regulation requires audit access at all levels of the stored data.
The company hosts the application on an on-premises infrastructure that is running out of storage capacity. A solutions architect must securely migrate the existing data to AWS while satisfying the new regulation.
Which solution will meet these requirements?
Other
Community
UAnonymous
A
Use AWS DataSync to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.
B
Use AWS Snowcone to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.
C
Use Amazon S3 Transfer Acceleration to move the existing data to Amazon S3. Use AWS CloudTrail to log data events.
D
Use AWS Storage Gateway to move the existing data to Amazon S3. Use AWS CloudTrail to log management events.
Explanation:
Explanation
Correct Answer: A
Why Option A is correct:
- AWS DataSync is specifically designed for automated data transfer between on-premises storage and AWS storage services (like Amazon S3). It's ideal for migrating existing data from on-premises to AWS.
- AWS CloudTrail data events provide detailed audit logging at the data level, which is required by the regulation for "audit access at all levels of the stored data." Data events log API calls that read or write data in resources (like S3 objects), providing granular audit trails.
- The combination addresses both requirements: secure migration (DataSync) and comprehensive audit logging (CloudTrail data events).
Why other options are incorrect:
Option B:
- AWS Snowcone is for offline data transfer via physical devices, which is not necessary here since the company has network connectivity.
- CloudTrail management events only log management operations (like creating/deleting buckets), not data-level operations.
Option C:
- S3 Transfer Acceleration is for accelerating uploads to S3 over the internet, not specifically designed for secure migration of existing on-premises data.
- While it mentions CloudTrail data events (correct for audit), the migration method is not optimal.
Option D:
- AWS Storage Gateway provides hybrid cloud storage, not primarily for data migration.
- CloudTrail management events don't provide the required data-level audit logging.
Key Requirements Addressed:
- Secure migration from on-premises to AWS - AWS DataSync provides secure, automated data transfer
- Audit access at all levels - CloudTrail data events log all S3 object-level operations
- Healthcare data compliance - Both services support compliance requirements for sensitive data
- Running out of storage capacity - Migrating to S3 provides scalable storage
Comments
Loading comments...