AWS Certified Database – Specialty — Question 256

An ecommerce company is running Amazon RDS for Microsoft SQL Server. The company is planning to perform testing in a development environment with production data. The development environment and the production environment are in separate AWS accounts. Both environments use AWS Key Management Service (AWS KMS) encrypted databases with both manual and automated snapshots. A database specialist needs to share a KMS encrypted production RDS snapshot with the development account.

Which combination of steps should the database specialist take to meet these requirements? (Choose three.)

Answer options

• A. Create an automated snapshot. Share the snapshot from the production account to the development account.
• B. Create a manual snapshot. Share the snapshot from the production account to the development account.
• C. Share the snapshot that is encrypted by using the development account default KMS encryption key.
• D. Share the snapshot that is encrypted by using the production account custom KMS encryption key.
• E. Allow the development account to access the production account KMS encryption key.
• F. Allow the production account to access the development account KMS encryption key.

Correct answer: B, D, E

Explanation

The correct steps are to create a manual snapshot (B), use the production account's custom KMS encryption key (D), and allow the development account to access the production account's KMS encryption key (E). Options A and C are incorrect because automated snapshots cannot be shared directly this way, and sharing encrypted snapshots with the development account's default key would not work with the production data encryption standards.