AWS Backup Primer

What is the best backup option to choose if you have 20 AWS service in your account

1 pts

volume_mute

Service-native backup and snapshots

Centralized policy-based backup and snapshots

note_alt Add notes

flag Flag

Correct Answer

Explanation

Service level agreements (SLAs) for backup and recovery revolve around three key objectives

1 pts

volume_mute

EC2 instance-level recovery

Recovery Point Objectives

Migration planning

Recovery Time Objectives

Audit and Compliance Objectives

Time-to-live (TTL)

Cost Optimization

note_alt Add notes

flag Flag

Correct Answer

Explanation

Match back recovery objectives by their definitions

1 pts

(1) - is how far back in time you can go to recover the data. How much data loss can you tolerate?
(2) - defines the maximum amount of time that your business can be down or offline without affecting the business.

Please drag and drop the selected option in the right place or type it instead

A recovery time objective (RTO)

A recovery point objective (RPO)

note_alt Add notes

flag Flag

Correct Answer

Explanation

If your RTO is 6 hours and you can bring the services back online after 2 hours, then you've met your RTO by

1 pts

volume_mute

6 hours

2 hours

4 hours

10 hours

note_alt Add notes

flag Flag

Correct Answer

Explanation

Match the AWS service on the left with the correct explanation on the right

1 pts

To complete the line match

Click on an item in the first group
Click on the match in the second group

To delete a match, double click on a line

AWS Service

Service-native backups and snapshots

AWS Elastic Disaster Recovery

AWS Backup

Explanation

Tightly integrated with the service they support

Centralizes and automates data protection across AWS services

Uses AWS Cloud as a recovery environment

note_alt Add notes

flag Flag

Correct Answer

Explanation

It is enough to only backup the EBS volumes of an EC2 instance to provide the right recovery option if needed

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

The backup data for compute is stored as an Amazon EBS volume-backed AMI, which is then stored by AWS Backup within

1 pts

volume_mute

a special storage service

an Amazon Simple Storage Service (Amazon S3) bucket

a dedicated EC2 instance

external hard drives

note_alt Add notes

flag Flag

Correct Answer

Explanation

Choose what is backed up when AWS Backup takes a snapshot of an EC2 instance

1 pts

volume_mute

The root Amazon EBS storage volume

Launch configurations

All associated EBS volumes

Amazon Machine Image (AMI), including all launch configurations

Configuration of the Elastic Inference accelerator, if it is attached to the instance

User data used when the instance was launched

Certain configuration parameters of the EC2 instance, including (Instance type, Security groups, Amazon Virtual Private Cloud (Amazon VPC), Monitoring configuration, Tags)

note_alt Add notes

flag Flag

Correct Answer

Explanation

You must activate S3 Versioning on your bucket before AWS Backup can back it up

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

With integration with AWS Backup, you can back up on-premises applications that use Storage Gateway volumes for cloud-backed storage

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

Which EC2 configuration parameters does AWS Backup back up?

1 pts

volume_mute

User data and scripts

Instance type

Firewall configurations

Elastic Inference accelerator configuration

Security groups and Amazon Virtual Private Cloud (Amazon VPC)

Monitoring configuration and tags

note_alt Add notes

flag Flag

Correct Answer

Explanation

How is AWS Backup pricing determined?

1 pts

volume_mute

How many snapshots you make per week

The amount of storage you use

How many backup plans you have

The number of services using backups

The service being used

note_alt Add notes

flag Flag

Correct Answer

Explanation

Cloud-enabled architectures are built and run completely within the cloud and full use services and technologies offered within the cloud

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup can seamlessly integrate with AWS Organizations so the administrative team can manage and monitor all of their backups from a single management account

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup does not provide unified IAM policy control over which accounts and roles can access backup resources

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

What is the service that can be used in order to stay compliant?

1 pts

volume_mute

Healthcare companies must build applications that store, process, and transmit sensitive health-related information, consistent with the privacy and security obligations set under security frameworks. Because AnyCompany-Health is based in the United States of America, they are required to comply with both the US Health Insurance Portability and Accountability Act (HIPAA) and the Federal Risk and Authorization Management Program (FedRAMP).

What is the service that can be used in order to stay compliant?

AWS Backup

AWS CloudWatch

AWS Backup Audit Manager

AWS CloudTrail

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup is configured by defining a central data protection policy called a

1 pts

volume_mute

backup plan

backup procedure

backup option

backup book

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup templates offer AWS best practices and common backup policies including

1 pts

volume_mute

35-day

1-year

5-year

7-year

10-year

note_alt Add notes

flag Flag

Correct Answer

Explanation

In AWS Backup, you can specify the vault to store your backups when you define the backup rules

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

You can have multiple backup rules in a single backup plan to meet your compliance requirements

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

An AWS account can create up to _______ backup vaults per AWS Region.

1 pts

volume_mute

10

50

100

200

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup Vault Lock enforces a write-many, ready-many (WMRM) setting for all the backups you store and create in a backup vault

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

Continuous backup for PITRs are available for

1 pts

volume_mute

RDS resources

S3 resources

EC2 resources

note_alt Add notes

flag Flag

Correct Answer

Explanation

What is the purpose of transitioning data to cold storage in AWS Backup?

1 pts

volume_mute

To increase data availability

To reduce storage costs for infrequently accessed data

To improve data recovery speed

To enhance data security

note_alt Add notes

flag Flag

Correct Answer

Explanation

Which options are available when creating a new backup plan?

1 pts

volume_mute

Define a plan using JavaScript Object Notation (JSON)

Use a service opt-in

Build a new plan

Start with a template

Back up jobs

Copy to destination

note_alt Add notes

flag Flag

Correct Answer

Explanation

What is a backup vault?

1 pts

volume_mute

A backup vault is an encryption key to encrypt your backups

A backup vault is a container that stores and organizes your backups

A backup vault is a type of EC2 instances used to backup data

a backup vault is a network service

note_alt Add notes

flag Flag

Correct Answer

Explanation

With multiple vaults, you can

1 pts

volume_mute

Secure the vault using vault access policies

Limit the ability to delete backups from within a vault

Separate permissions; for example, development, test, and production

Ensure that backups can be safely deleted from the native services being protected

Ensure that backups cannot be deleted from the native services being protected

Have a unique SNS notification configuration per vault

note_alt Add notes

flag Flag

Correct Answer

Explanation

A default backup vault is automatically created if you use AWS Backup through AWS CLI, AWS SDK, and AWS CloudFormation

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

AWS Backup vault names are not case sensitive

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

An AWS Backup for a service like DynamoDB will automatically work without creating credentials

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

With AWS Backup Vault Lock, you can prevent anyone, including data owners, from changing data retention period, except root and administrators

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

What type of security does the AWS Backup Vault Lock feature use?

1 pts

volume_mute

Envelope encryption

Biba model

Write-once, read-many (WORM)

Hash functions

note_alt Add notes

flag Flag

Correct Answer

Explanation

What are the benefits of having multiple backup vaults?

1 pts

volume_mute

Separates backups by retention date

Limits who can access recovery points

Allows cross-account access

Limits the ability to delete backups

Provides faster recovery times

Separates permissions

note_alt Add notes

flag Flag

Correct Answer

Explanation

You can configure AWS CloudWatch to collect and track metrics from AWS Backup

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

You can use CloudWatch to monitor AWS Backup metrics by using the _________

1 pts

volume_mute

AWS/backup

AWS/monitor

note_alt Add notes

flag Flag

Correct Answer

Explanation

Is this a valid use case in AWS CloudWatch?

1 pts

volume_mute

Monitor the number of failed backup jobs within one or more specific backup vaults. When there are more than 5 failed jobs within 1 hour, send an email or SMS using Amazon SNS or open a ticket to the engineering team to investigate.

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

EventBridge is a serverless event bus service that you can use to connect your applications with data from a variety of sources

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

When you use AWS Backup with EventBridge, AWS Backup sends events to EventBridge in a best-effort manner every 5 minutes

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

In Amazon CloudWatch metrics, what is the function of a namespace?

1 pts

volume_mute

A tag used to query events

The category used for backup plans

The name of the set of metrics you are using

A container to hold CloudWatch metrics

note_alt Add notes

flag Flag

Correct Answer

Explanation

Which event notifications does AWS Backup support?

1 pts

volume_mute

Recovery point jobs

Backup point jobs

Delete jobs

Duplicate jobs

Copy jobs

Backup and restore jobs

note_alt Add notes

flag Flag

Correct Answer

Explanation

It requires a manual effort to detect violations of data protection policies and take corrective actions when using AWS Backup Audit Manager

1 pts

volume_mute

True

False

note_alt Add notes

flag Flag

Correct Answer

Explanation

How does AWS Backup Audit Manager use controls?

1 pts

volume_mute

To audit the adherence of a backup requirement

To audit the mechanisms used in the report template

To audit modifications to backup jobs through the API

To audit which AWS services are being used

note_alt Add notes

flag Flag

Correct Answer

Explanation

What does a report plan require before you run reports?

1 pts

volume_mute

An S3 bucket for storage

EC2 access to the resource

Full control to the backed-up service

An EBS volume for storage

note_alt Add notes

flag Flag