A financial institution requires that all EBS volumes, S3 buckets, and RDS databases are backed up daily. Backups must be retained for 7 years and protected against accidental deletion, even by administrators. What is the BEST solution?

Answer options:

Write a Lambda function to create snapshots and store them in S3 Glacier.

Use AWS Backup with a backup vault configured with Vault Lock in compliance mode.

Enable automated backups on all services and use SCPs to prevent deletion.

Use S3 Object Lock for S3, and manual snapshots for EBS and RDS.

How to approach this question

Look for centralized backup management with WORM (Write Once Read Many) capabilities.

B.Use AWS Backup with a backup vault configured with Vault Lock in compliance mode.✓ Correct

Use AWS Backup with a backup vault configured with Vault Lock in compliance mode.

AWS Backup Vault Lock in compliance mode provides immutable backups that cannot be deleted before their retention period expires.

Relying solely on SCPs, which can be modified by highly privileged users.

75 questions · hints · full answers · grading