Answer-first summary for fast verification
Answer: Create an FSx for Windows File Server file system in us-east-1 that has a Multi-AZ deployment type. Use AWS Backup to create a daily backup plan that includes a backup rule that copies the backup to us-west-2. Configure AWS Backup Vault Lock in compliance mode for a target vault in us-west-2. Configure a minimum duration of 5 years.
## Explanation **Key Requirements Analysis:** 1. **RPO of 5 minutes** - This requires Multi-AZ deployment for FSx for Windows File Server, as Single-AZ 2 deployment doesn't provide the required RPO. 2. **Replication to us-west-2 Region** - Achieved through AWS Backup cross-region copy. 3. **Data retention for 5 years with no deletion** - Requires AWS Backup Vault Lock in **compliance mode** (not governance mode). **Why Option C is Correct:** - **Multi-AZ deployment**: FSx for Windows File Server Multi-AZ deployment provides synchronous replication across Availability Zones with an RPO of 5 minutes, meeting the requirement for planned/unplanned disruptions. - **AWS Backup with cross-region copy**: Creates backups in us-west-2 region. - **AWS Backup Vault Lock in compliance mode**: Ensures backups cannot be deleted by any user (including root account) for the specified retention period (5 years). Governance mode allows deletion by privileged users with specific IAM permissions. **Why Other Options are Incorrect:** - **Options A & D**: Use Single-AZ 2 deployment, which doesn't meet the 5-minute RPO requirement. - **Options B & D**: Use governance mode instead of compliance mode, which doesn't guarantee that data won't be deleted for 5 years. **Additional Context:** - FSx for Windows File Server Multi-AZ provides automatic failover with minimal disruption. - AWS Backup Vault Lock compliance mode provides WORM (Write Once Read Many) protection that cannot be bypassed. - Daily backup plan with cross-region copy ensures disaster recovery capabilities.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A company wants to use Amazon FSx for Windows File Server for its Amazon EC2 instances that have an SMB file share mounted as a volume in the us-east-1 Region. The company has a recovery point objective (RPO) of 5 minutes for planned system maintenance or unplanned service disruptions. The company needs to replicate the file system to the us-west-2 Region. The replicated data must not be deleted by any user for 5 years.
Which solution will meet these requirements?
A
Create an FSx for Windows File Server file system in us-east-1 that has a Single-AZ 2 deployment type. Use AWS Backup to create a daily backup plan that includes a backup rule that copies the backup to us-west-2. Configure AWS Backup Vault Lock in compliance mode for a target vault in us-west-2. Configure a minimum duration of 5 years.
B
Create an FSx for Windows File Server file system in us-east-1 that has a Multi-AZ deployment type. Use AWS Backup to create a daily backup plan that includes a backup rule that copies the backup to us-west-2. Configure AWS Backup Vault Lock in governance mode for a target vault in us-west-2. Configure a minimum duration of 5 years.
C
Create an FSx for Windows File Server file system in us-east-1 that has a Multi-AZ deployment type. Use AWS Backup to create a daily backup plan that includes a backup rule that copies the backup to us-west-2. Configure AWS Backup Vault Lock in compliance mode for a target vault in us-west-2. Configure a minimum duration of 5 years.
D
Create an FSx for Windows File Server file system in us-east-1 that has a Single-AZ 2 deployment type. Use AWS Backup to create a daily backup plan that includes a backup rule that copies the backup to us-west-2. Configure AWS Backup Vault Lock in governance mode for a target vault in us-west-2. Configure a minimum duration of 5 years.