AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ7

Incident Response

A company uses Amazon EC2 instances to host frontend services behind an Application Load Balancer. Amazon Elastic Block Store (Amazon EBS) volumes are attached to the EC2 instances. The company uses Amazon S3 buckets to store large image and music files.

The company has implemented an AWS security architecture to prevent, detect, and isolate potential ransomware attacks. The company now wants to reduce risk further.

A security engineer must develop a disaster recovery solution that can restore normal operations if an attacker bypasses the preventive and detective controls. The solution must meet an RPO of 1 hour.

Which solution will meet these requirements?

Explanation

A one-hour RPO requires backups at least hourly for the data that must be recovered. AWS Backup supports scheduled backups for Amazon EC2 and Amazon S3; an EC2 recovery point includes the instance and its attached EBS root and data volumes. CloudFormation templates and application configuration code provide the repeatable infrastructure and configuration needed to rebuild the environment during recovery.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!