Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon BDS-C00 Exam - Topic 4 Question 130 Discussion

An Amazon Redshift Database is encrypted using KMS. A data engineer needs to use the AWS CLI to create a KMS encrypted snapshot of the database in another AWS region.Which three steps should the data engineer take to accomplish this task? (Select Three.)
A) Create a new KMS key in the destination region and D) Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key from the source region and F) In the destination region, enable cross-region replication and specify the name of the copy grant created
B) Copy the existing KMS key to the destination region
C) Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key created in the destination region
E) In the source, enable cross-region replication and specify the name of the copy grant created

Amazon BDS-C00 Exam - Topic 4 Question 130 Discussion

Actual exam question for Amazon's BDS-C00 exam
Question #: 130
Topic #: 4
[All BDS-C00 Questions]

An Amazon Redshift Database is encrypted using KMS. A data engineer needs to use the AWS CLI to create a KMS encrypted snapshot of the database in another AWS region.

Which three steps should the data engineer take to accomplish this task? (Select Three.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D, F

https://docs.amazonaws.cn/en_us/redshift/latest/mgmt/working-with-db-encryption.html#configure-snapshot-copy-grant


Contribute your Thoughts:

0/2000 characters
Madalyn
1 month ago
I practiced a similar question where enabling cross-region replication was crucial, but I can't recall if it was in the source or destination region.
upvoted 0 times
...
Tamra
1 month ago
I think we definitely need to use CreateSnapshotCopyGrant, but I'm confused about whether it should be for the source or destination region.
upvoted 0 times
...
Aide
1 month ago
I remember something about needing to create a KMS key in the destination region, but I'm not sure if it's necessary to copy the existing key.
upvoted 0 times
...

Save Cancel