AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ15

Data Security and Governance

A company uses AWS Key Management Service (AWS KMS) to encrypt an Amazon Redshift cluster. As part of its disaster recovery (DR) strategy, the company wants to configure a cross-Region snapshot of the Redshift cluster.

A data engineer must use the AWS CLI to create the cross-Region snapshot.

Which combination of steps meets these requirements?

Choose two
  • A Create a KMS key and configure a snapshot copy grant in the source AWS Region.
  • B In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the destination AWS Region.
  • C In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the source AWS Region.
  • D Create a KMS key and configure a snapshot copy grant in the destination AWS Region.
  • E Convert the cluster to a Multi-AZ deployment.
Explanation

For cross-Region copying of snapshots from an AWS KMS-encrypted Amazon Redshift cluster, Amazon Redshift needs a snapshot copy grant for the KMS key in the destination Region. Snapshot copying is enabled for the source cluster while specifying the name of that destination-Region snapshot copy grant.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!