Examkin

Soru

Zorluk: KolayLarge-Scale Data Transfer using Snow Family, DataSync, and Transfer Family

A company wants to transfer 100 TB100\text{ TB} of data from its on-premises Network Attached Storage (NAS) to Amazon S3. The company has a 20 Mbps20\text{ Mbps} internet connection that is currently at 80%80\% utilization. The migration must be completed within 14 days. Security requirements mandate that all data must be encrypted at rest during transit and in Amazon S3 using a customer managed key. Which two options should the solutions architect select to perform this transfer? (Select TWO.)

  1. Order an AWS Snowball Edge Storage Optimized device to copy the data locally and ship it to AWS.Cevap
  2. Configure the AWS Snowball Edge job using a customer managed AWS KMS key for encryption.Cevap
  3. C
    Use AWS DataSync to transfer the data directly to Amazon S3 over the existing internet connection.
  4. D
    Configure the AWS Snowball Edge job to encrypt the data using the default AWS managed key (aws/s3).
  5. E
    Establish an AWS Transfer Family SFTP endpoint and configure an AWS Transit Gateway to route the data from the on-premises NAS.

Cevap

Order an AWS Snowball Edge Storage Optimized device to copy the data locally and ship it to AWS, and configure the AWS Snowball Edge job using a customer managed AWS KMS key for encryption.
The correct options are to order an AWS Snowball Edge Storage Optimized device to physically transport the data and to configure the job using a customer managed key. With a 100 TB100\text{ TB} dataset and a highly constrained network link, physical transfer via Snowball is required to complete the migration within the 14-day limit. Additionally, the compliance mandate for a customer managed key requires specifying a Customer Managed Key (CMK) during the job creation rather than using the default AWS managed key.

Adım Adım Çözüm

1
Calculate the network transfer time.
100 TB100\text{ TB} of data over 20 Mbps20\text{ Mbps} of bandwidth (with only 4 Mbps4\text{ Mbps} available) will take more than a year to transfer. Therefore, an offline transfer using AWS Snowball Edge is required to meet the 14-day migration window.
To determine whether online or offline transfer is appropriate based on the network bandwidth and migration timeline constraints.
2
Select the correct encryption key type.
The security policy mandates a customer managed key. An AWS managed key like `aws/s3` cannot satisfy this custom security requirement because its policy cannot be modified. A customer managed key must be specified during the creation of the Snowball Edge job.
To satisfy security and compliance constraints requiring customer-controlled keys.

Anahtar Kavram

Determining physical vs. network data transfer mechanisms based on bandwidth constraints, and applying KMS customer managed keys for compliance.
Bu soruyu puanla

Konular

Large-Scale Data Transfer using Snow Family, DataSync, and Transfer Family

Bu konudan daha fazla soru