Examkin

Question

Difficulty: EasyAWS Elastic Disaster Recovery

A SysOps Administrator is configuring AWS Elastic Disaster Recovery (AWS DRS) to replicate an on-premises server to AWS. Which of the following requirements must be met to ensure that the AWS Replication Agent can successfully register the source server and replicate data to AWS? (Select TWO.)

  1. Configure outbound network access from the source server to the AWS DRS API endpoints over TCP port 443 and to the replication servers over TCP port 1500.Answer
  2. Attach the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation.Answer
  3. C
    Configure a Route 53 Active-Active routing policy to dynamically route the data replication traffic to the replication staging area.
  4. D
    Grant iam:PassRole permissions to the AWS Replication Agent on the source server instead of installing with IAM user credentials.
  5. E
    Enable inbound firewall rules on the source server to allow incoming traffic on TCP ports 443 and 1500 from AWS.

Answer

Configuring outbound network access from the source server to the AWS DRS API endpoints over TCP port 443 and to the replication servers over TCP port 1500, and attaching the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation.
The correct requirements are configuring outbound network access from the source server over TCP ports 443 (for API control plane) and 1500 (for replication data), and attaching the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation. These two options ensure the agent has both the network path and the security authorization to start replication.

Step-by-Step Solution

1
Identify network requirements for AWS Elastic Disaster Recovery (AWS DRS) agent installation.
Determine that the source agent must initiate outbound connections on TCP port 443 to contact the AWS DRS control plane, and TCP port 1500 to stream replication data to replication servers in the staging subnet.
AWS DRS replication is outbound-only, removing the need to allow inbound ports from the internet on the source database or server.
2
Identify the IAM permissions required to register the replication agent.
The AWS Replication Agent installation script prompts for IAM credentials (Access Key ID and Secret Access Key) associated with a user that has the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy.
This policy grants the minimum permissions needed to register the agent and communicate with the AWS DRS service.

Key Concept

AWS Elastic Disaster Recovery (AWS DRS) Agent Installation and Replication Requirements
Rate this question

Topics

AWS Elastic Disaster Recovery

More questions from this topic