AWS Certified Data Engineer – Associate (DEA-C01) — Question 195

A company uses AWS Key Management Service (AWS KMS) to encrypt an Amazon Redshift cluster. The company wants to configure a cross-Region snapshot of the Redshift cluster as part of disaster recovery (DR) strategy.

A data engineer needs to use the AWS CLI to create the cross-Region snapshot.

Which combination of steps will meet these requirements? (Choose two.)

Answer options

• A. Create a KMS key and configure a snapshot copy grant in the source AWS Region.
• B. In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the destination AWS Region.
• C. In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the source AWS Region.
• D. Create a KMS key and configure a snapshot copy grant in the destination AWS Region.
• E. Convert the cluster to a Multi-AZ deployment.

Correct answer: B, D

Explanation

The correct steps are B and D because enabling snapshot copying in the source region and specifying the snapshot copy grant in the destination region is essential for cross-Region snapshots. Option A is incorrect as the snapshot copy grant needs to be in the destination region, not the source, while option C mistakenly suggests using a grant from the source region, which does not fulfill the requirement for cross-Region operations. Option E is irrelevant to the snapshot process.