ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 719 - SAA-C03 discussion

Report
Export

A company is migrating its workloads to AWS. The company has sensitive and critical data in on-premises relational databases that run on SQL Server instances. The company wants to use the AWS Cloud to increase security and reduce operational overhead for the databases. Which solution will meet these requirements?

A.
Migrate the databases to Amazon EC2 instances. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
Answers
A.
Migrate the databases to Amazon EC2 instances. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
B.
Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
Answers
B.
Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
C.
Migrate the data to an Amazon S3 bucket Use Amazon Macie to ensure data security
Answers
C.
Migrate the data to an Amazon S3 bucket Use Amazon Macie to ensure data security
D.
Migrate the databases to an Amazon DynamoDB table. Use Amazon CloudWatch Logs to ensure data security
Answers
D.
Migrate the databases to an Amazon DynamoDB table. Use Amazon CloudWatch Logs to ensure data security
Suggested answer: B

Explanation:

Understanding the Requirement: The company needs to migrate sensitive and critical data from on-premises SQL Server databases to AWS, aiming to increase security and reduce operational overhead.

Analysis of Options:

EC2 Instances with KMS: Running SQL Server on EC2 provides control but requires significant operational overhead for management, backups, patching, and high availability.

Multi-AZ Amazon RDS for SQL Server with KMS: Amazon RDS for SQL Server offers managed database services, reducing operational overhead. Multi-AZ deployment provides high availability, and KMS encryption ensures data security.

Amazon S3 and Macie: S3 is not a suitable replacement for relational databases, and Macie is used for data security and compliance but not for database operations.

Amazon DynamoDB and CloudWatch Logs: DynamoDB is a NoSQL database and does not support SQL Server workloads directly. CloudWatch Logs are used for monitoring, not for ensuring database security.

Best Solution:

Multi-AZ Amazon RDS for SQL Server with KMS: This solution meets the requirements for security, high availability, and reduced operational overhead by using a managed database service with encryption.

Amazon RDS for SQL Server

AWS Key Management Service (KMS)

asked 16/09/2024
Paola Aguirre
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first