Question
A company has an application that uses dozens of Amazon DynamoDB tables to store data. Auditors find that the tables do not comply with the company's data protection policy.
The company's retention policy states that all data must be backed up twice each month: once at midnight on the 15th day of the month and again at midnight on the 25th day of the month. The company must retain the backups for 3 months.
Which combination of steps should a security engineer take to meet these requirements? (Choose two.)
- A. Use the DynamoDB on-demand backup capability to create a backup plan. Configure a lifecycle policy to expire backups after 3 months.
- B. Use AWS DataSync to create a backup plan. Add a backup rule that includes a retention period of 3 months.
- C. Use AWS Backup to create a backup plan. Add a backup rule that includes a retention period of 3 months. Correct
- D. Set the backup frequency by using a cron schedule expression. Assign each DynamoDB table to the backup plan. Correct
- E. Set the backup frequency by using a rate schedule expression. Assign each DynamoDB table to the backup plan.
Explanation
C is correct because AWS Backup can be used to create a backup plan for DynamoDB tables with a specified retention period of 3 months. D is correct as it allows setting up a cron schedule expression within the AWS Backup rule to automate backups at specific times (midnight on the 15th and 25th day of each month), ensuring compliance with the company's data protection policy.
