AWS Certified Solutions Architect – Associate (SAA-C02) — Question 252

A company is hosting 60 TB of production-level data in an Amazon S3 bucket. A solutions architect needs to bring that data on premises for quarterly audit requirements. This export of data must be encrypted while in transit. The company has low network bandwidth in place between AWS and its on-premises data center.
What should the solutions architect do to meet these requirements?

Answer options

• A. Deploy AWS Migration Hub with 90-day replication windows for data transfer.
• B. Deploy an AWS Storage Gateway volume gateway on AWS. Enable a 90-day replication window to transfer the data.
• C. Deploy Amazon Elastic File System (Amazon EFS), with lifecycle policies enabled, on AWS. Use it to transfer the data.
• D. Deploy an AWS Snowball device in the on-premises data center after completing an export job request in the AWS Snowball console.

Correct answer: D

Explanation

The correct answer is D because AWS Snowball is designed for transferring large amounts of data securely, especially when network bandwidth is limited. Options A, B, and C do not adequately address the need for secure data transfer under low bandwidth conditions, as they rely on continuous network connectivity which may not be feasible in this scenario.