AWS Certified Solutions Architect Professional SAP-C02 Practice Question
A company is migrating 250 TB of log files from an on-premises NFS file server to an existing Amazon S3 bucket that serves as a data lake. The only network path between the data center and AWS is a 1 Gbps AWS Site-to-Site VPN. The migration team has these requirements:
Transfer the data online without shipping physical devices.
Encrypt all data while it is in transit.
Retain original file permissions and timestamps in Amazon S3.
Exclude obsolete folders such as /tmp and /old_reports from the migration.
Keep ongoing infrastructure management effort to a minimum.
Which approach will meet these requirements?
Enable Amazon S3 Transfer Acceleration on the bucket and run an aws s3 sync command from the on-premises server to the bucket.
Order multiple AWS Snowball Edge Storage-Optimized devices, copy the data to each device, and return them for import into Amazon S3.
Deploy an AWS DataSync agent on-premises, create a task to transfer the NFS share to the Amazon S3 bucket with include/exclude filters enabled.
Set up an AWS Transfer Family SFTP server backed by the S3 bucket and write scripts to upload the files over SFTP.
Deploying an AWS DataSync agent on-premises and configuring a DataSync task to copy from the NFS share to Amazon S3 satisfies every requirement. DataSync transfers over the VPN using TLS 1.3, preserving metadata such as timestamps and POSIX permissions. Its include/exclude filter feature omits specific folders, and the managed service handles scheduling, monitoring, and scaling so the migration team has little infrastructure to manage.
The other options fall short:
An AWS Transfer Family SFTP server would require custom scripts, user management, and does not automatically preserve file system metadata stored in S3.
Amazon S3 Transfer Acceleration can speed up uploads, but administrators must build and run their own CLI or application logic and it does not preserve NFS permissions or support granular folder exclusion.
AWS Snowball Edge devices provide an offline method, which contradicts the requirement for an online transfer and adds the operational burden of ordering, receiving, and shipping the devices.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AWS DataSync and how does it work?
Open an interactive chat with Bash
How does AWS DataSync handle file permissions and metadata during a migration?
Open an interactive chat with Bash
How can AWS DataSync include or exclude specific folders during a transfer?
Open an interactive chat with Bash
AWS Certified Solutions Architect Professional SAP-C02
Accelerate Workload Migration and Modernization
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access