Amazon SAP-C02 Exam - Topic 4 Question 78 Discussion

Question

A company runs applications in hundreds of production AWS accounts. The company uses AWS Organizations with all features enabled and has a centralized backup

operation that uses AWS Backup.

The company is concerned about ransomware attacks. To address this concern, the company has created a new policy that all backups must be resilient to breaches of privileged-user credentials in any production account.

Which combination of steps will meet this new requirement? (Select THREE.)

Henriette · Accepted Answer

A) Implement cross-account backup with AWS Backup vaults in designated non-production accounts. and B) Add an SCP that restricts the modification of AWS Backup vaults. and C) Implement AWS Backup Vault Lock in compliance mode.

Henriette · Answer

D) Configure the backup frequency, lifecycle, and retention period to ensure that at least one backup always exists in the cold tier.

Henriette · Answer

E) Configure AWS Backup to write all backups to an Amazon S3 bucket in a designated non-production account. Ensure that the S3 bucket has S3 Object Lock enabled.

Henriette · Answer

F) Implement least privilege access for the IAM service role that is assigned to AWS Backup.