Topic 1 Question 393

AWS Certified Solutions Architect - Professional

Topic 1 Question 393
A company is migrating an on-premises application and a MySQL database to AWS. The application processes highly sensitive data, and new data is constantly updated in the database. The data must not be transferred over the internet. The company also must encrypt the data in transit and at rest.

The database is 5 TB in size. The company already has created the database schema in an Amazon RDS for MySQL DB instance. The company has set up a 1 Gbps AWS Direct Connect connection to AWS. The company also has set up a public VIF and a private VIF. A solutions architect needs to design a solution that will migrate the data to AWS with the least possible downtime.

Which solution will meet these requirements?
- Perform a database backup. Copy the backup files to an AWS Snowball Edge Storage Optimized device. Import the backup to Amazon S3. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) for encryption at rest. Use TLS for encryption in transit. Import the data from Amazon S3 to the DB instance.
- Use AWS Database Migration Service (AWS DMS) to migrate the data to AWS. Create a DMS replication instance in a private subnet. Create VPC endpoints for AWS DMS. Configure a DMS task to copy data from the on-premises database to the DB instance by using full load plus change data capture (CDC). Use the AWS Key Management Service (AWS KMS) default key for encryption at rest. Use TLS for encryption in transit.
- Perform a database backup. Use AWS DataSync to transfer the backup files to Amazon S3. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) for encryption at rest. Use TLS for encryption in transit. Import the data from Amazon S3 to the DB instance.
- Use Amazon S3 File Gateway. Set up a private connection to Amazon S3 by using AWS PrivateLink. Perform a database backup. Copy the backup files to Amazon S3. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) for encryption at rest. Use TLS for encryption in transit. Import the data from Amazon S3 to the DB instance.
ユーザの投票
コメント(9)
- 正解だと思う選択肢: B
  B. Use o AWS Database Migration Service (AWS DMS) para migrar os dados para a AWS. Crie uma instância de replicação DMS em uma sub-rede privada. Crie endpoints VPC para AWS DMS. Configure uma tarefa DMS para copiar dados do banco de dados local para a instância de banco de dados usando carga total mais captura de dados de alteração (CDC). Use a chave padrão do AWS Key Management Service (AWS KMS) para criptografia em repouso. Use TLS para criptografia em trânsito.
  
  👍 2
  Jonalb2023/11/22
- 正解だと思う選択肢: B
  database migration AND least possible downtime? AWS DMS
  
  👍 2
  GabrielDeBiasi2023/11/28
- 正解だと思う選択肢: B
  Answer B - Company has created a DB schema on AWS. So next logical step is to use DMS for DB migration over the Private VIF. VPC Endpoint is also used for DMS.
  
  👍 2
  shaaam802023/11/29
シャッフルモード

ユーザの投票

コメント(9)