AWS Backup Primer

Backups are an essential component of your business resiliency and operational commitments

download Export

search_insights Statistics

stylus_note White Board

Quran

calculate Calculator

QUESTION OF

Views #: 303

Questions #: 43

Time: 15 minutes

Pass Score: 80.0%

Style

Step

List

Mode

Exam

Practice

What is the best backup option to choose if you have 20 AWS service in your account

Service-native backup and snapshots

Centralized policy-based backup and snapshots

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Service level agreements (SLAs) for backup and recovery revolve around three key objectives

EC2 instance-level recovery

Recovery Point Objectives

Migration planning

Recovery Time Objectives

Audit and Compliance Objectives

Time-to-live (TTL)

Cost Optimization

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Match back recovery objectives by their definitions

(1) - is how far back in time you can go to recover the data. How much data loss can you tolerate?
(2) - defines the maximum amount of time that your business can be down or offline without affecting the business.

drag and drop the selected option to the right place

A recovery time objective (RTO)

A recovery point objective (RPO)

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

If your RTO is 6 hours and you can bring the services back online after 2 hours, then you've met your RTO by

6 hours

2 hours

4 hours

10 hours

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Match the AWS service on the left with the correct explanation on the right

To complete the line match

Click on an item in the first group
Click on the match in the second group

To delete a match, double click on a line

AWS Service

Service-native backups and snapshots

AWS Elastic Disaster Recovery

AWS Backup

Explanation

Tightly integrated with the service they support

Centralizes and automates data protection across AWS services

Uses AWS Cloud as a recovery environment

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

It is enough to only backup the EBS volumes of an EC2 instance to provide the right recovery option if needed

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

The backup data for compute is stored as an Amazon EBS volume-backed AMI, which is then stored by AWS Backup within

a special storage service

an Amazon Simple Storage Service (Amazon S3) bucket

a dedicated EC2 instance

external hard drives

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Choose what is backed up when AWS Backup takes a snapshot of an EC2 instance

The root Amazon EBS storage volume

Launch configurations

All associated EBS volumes

Amazon Machine Image (AMI), including all launch configurations

Configuration of the Elastic Inference accelerator, if it is attached to the instance

User data used when the instance was launched

Certain configuration parameters of the EC2 instance, including (Instance type, Security groups, Amazon Virtual Private Cloud (Amazon VPC), Monitoring configuration, Tags)

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

You must activate S3 Versioning on your bucket before AWS Backup can back it up

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

With integration with AWS Backup, you can back up on-premises applications that use Storage Gateway volumes for cloud-backed storage

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Which EC2 configuration parameters does AWS Backup back up?

User data and scripts

Instance type

Firewall configurations

Elastic Inference accelerator configuration

Security groups and Amazon Virtual Private Cloud (Amazon VPC)

Monitoring configuration and tags

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

How is AWS Backup pricing determined?

How many snapshots you make per week

The amount of storage you use

How many backup plans you have

The number of services using backups

The service being used

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Cloud-enabled architectures are built and run completely within the cloud and full use services and technologies offered within the cloud

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup can seamlessly integrate with AWS Organizations so the administrative team can manage and monitor all of their backups from a single management account

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup does not provide unified IAM policy control over which accounts and roles can access backup resources

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What is the service that can be used in order to stay compliant?

Healthcare companies must build applications that store, process, and transmit sensitive health-related information, consistent with the privacy and security obligations set under security frameworks. Because AnyCompany-Health is based in the United States of America, they are required to comply with both the US Health Insurance Portability and Accountability Act (HIPAA) and the Federal Risk and Authorization Management Program (FedRAMP).

What is the service that can be used in order to stay compliant?

AWS Backup

AWS CloudWatch

AWS Backup Audit Manager

AWS CloudTrail

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup is configured by defining a central data protection policy called a

backup plan

backup procedure

backup option

backup book

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup templates offer AWS best practices and common backup policies including

35-day

1-year

5-year

7-year

10-year

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

In AWS Backup, you can specify the vault to store your backups when you define the backup rules

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

You can have multiple backup rules in a single backup plan to meet your compliance requirements

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

An AWS account can create up to _______ backup vaults per AWS Region.

100

200

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup Vault Lock enforces a write-many, ready-many (WMRM) setting for all the backups you store and create in a backup vault

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Continuous backup for PITRs are available for

RDS resources

S3 resources

EC2 resources

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What is the purpose of transitioning data to cold storage in AWS Backup?

To increase data availability

To reduce storage costs for infrequently accessed data

To improve data recovery speed

To enhance data security

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Which options are available when creating a new backup plan?

Define a plan using JavaScript Object Notation (JSON)

Use a service opt-in

Build a new plan

Start with a template

Back up jobs

Copy to destination

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What is a backup vault?

A backup vault is an encryption key to encrypt your backups

A backup vault is a container that stores and organizes your backups

A backup vault is a type of EC2 instances used to backup data

a backup vault is a network service

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

With multiple vaults, you can

Secure the vault using vault access policies

Limit the ability to delete backups from within a vault

Separate permissions; for example, development, test, and production

Ensure that backups can be safely deleted from the native services being protected

Ensure that backups cannot be deleted from the native services being protected

Have a unique SNS notification configuration per vault

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

A default backup vault is automatically created if you use AWS Backup through AWS CLI, AWS SDK, and AWS CloudFormation

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS Backup vault names are not case sensitive

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

An AWS Backup for a service like DynamoDB will automatically work without creating credentials

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

With AWS Backup Vault Lock, you can prevent anyone, including data owners, from changing data retention period, except root and administrators

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What type of security does the AWS Backup Vault Lock feature use?

Envelope encryption

Biba model

Write-once, read-many (WORM)

Hash functions

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What are the benefits of having multiple backup vaults?

Separates backups by retention date

Limits who can access recovery points

Allows cross-account access

Limits the ability to delete backups

Provides faster recovery times

Separates permissions

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

You can configure AWS CloudWatch to collect and track metrics from AWS Backup

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

You can use CloudWatch to monitor AWS Backup metrics by using the _________

AWS/backup

AWS/monitor

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Is this a valid use case in AWS CloudWatch?

Monitor the number of failed backup jobs within one or more specific backup vaults. When there are more than 5 failed jobs within 1 hour, send an email or SMS using Amazon SNS or open a ticket to the engineering team to investigate.

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

EventBridge is a serverless event bus service that you can use to connect your applications with data from a variety of sources

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

When you use AWS Backup with EventBridge, AWS Backup sends events to EventBridge in a best-effort manner every 5 minutes

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

In Amazon CloudWatch metrics, what is the function of a namespace?

A tag used to query events

The category used for backup plans

The name of the set of metrics you are using

A container to hold CloudWatch metrics

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Which event notifications does AWS Backup support?

Recovery point jobs

Backup point jobs

Delete jobs

Duplicate jobs

Copy jobs

Backup and restore jobs

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

It requires a manual effort to detect violations of data protection policies and take corrective actions when using AWS Backup Audit Manager

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

How does AWS Backup Audit Manager use controls?

To audit the adherence of a backup requirement

To audit the mechanisms used in the report template

To audit modifications to backup jobs through the API

To audit which AWS services are being used

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What does a report plan require before you run reports?

An S3 bucket for storage

EC2 access to the resource

Full control to the backed-up service

An EBS volume for storage

note_alt Add notes

POINTS (1)