Examkin

Soru

Zorluk: KolayAWS Elastic Disaster Recovery

A SysOps Administrator is configuring AWS Elastic Disaster Recovery (AWS DRS) to replicate an on-premises server to AWS. Which of the following requirements must be met to ensure that the AWS Replication Agent can successfully register the source server and replicate data to AWS? (Select TWO.)

  1. Configure outbound network access from the source server to the AWS DRS API endpoints over TCP port 443 and to the replication servers over TCP port 1500.Cevap
  2. Attach the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation.Cevap
  3. C
    Configure a Route 53 Active-Active routing policy to dynamically route the data replication traffic to the replication staging area.
  4. D
    Grant iam:PassRole permissions to the AWS Replication Agent on the source server instead of installing with IAM user credentials.
  5. E
    Enable inbound firewall rules on the source server to allow incoming traffic on TCP ports 443 and 1500 from AWS.

Cevap

Configuring outbound network access from the source server to the AWS DRS API endpoints over TCP port 443 and to the replication servers over TCP port 1500, and attaching the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation.
The correct requirements are configuring outbound network access from the source server over TCP ports 443 (for API control plane) and 1500 (for replication data), and attaching the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy to the IAM credentials used during agent installation. These two options ensure the agent has both the network path and the security authorization to start replication.

Adım Adım Çözüm

1
Identify network requirements for AWS Elastic Disaster Recovery (AWS DRS) agent installation.
Determine that the source agent must initiate outbound connections on TCP port 443 to contact the AWS DRS control plane, and TCP port 1500 to stream replication data to replication servers in the staging subnet.
AWS DRS replication is outbound-only, removing the need to allow inbound ports from the internet on the source database or server.
2
Identify the IAM permissions required to register the replication agent.
The AWS Replication Agent installation script prompts for IAM credentials (Access Key ID and Secret Access Key) associated with a user that has the AWSElasticDisasterRecoveryAgentInstallationPolicy managed policy.
This policy grants the minimum permissions needed to register the agent and communicate with the AWS DRS service.

Anahtar Kavram

AWS Elastic Disaster Recovery (AWS DRS) Agent Installation and Replication Requirements
Bu soruyu puanla

Konular

AWS Elastic Disaster Recovery

Bu konudan daha fazla soru