AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A company operates hundreds of EC2 instances in several AWS accounts that are part of the same AWS Organizations organization. Compliance rules require an encrypted daily backup of all EBS volumes that carry the tag Environment=Prod, with automatic retention of 30 days and a cross-Region copy for disaster recovery. Operations teams want a fully managed solution that minimizes custom code and must be centrally administered from the management account. Which approach meets these requirements?

Deploy an AWS Lambda function in the management account that runs daily, describes volumes with the Environment=Prod tag in every member account, and invokes create-snapshot and copy-snapshot API calls with a 30-day expiration tag.
Create an Amazon Data Lifecycle Manager (DLM) policy in each account that targets the Environment=Prod tag and configure it to copy snapshots to another Region for 30-day retention.
Enable AWS Backup for AWS Organizations, create a tag-based backup plan in the management account that includes a cross-Region copy rule and 30-day retention, and assign the plan to all accounts.
Use AWS Systems Manager Automation to run a cross-account runbook nightly that snapshots all EBS volumes, sets the DeleteOn=30Days tag, and relies on an EventBridge rule to delete snapshots after 30 days.

Report Issue

Answer Description

AWS Backup can create policy-based backup plans that select resources by tag, perform encrypted backups of EBS volumes, copy those backups to another Region, and apply lifecycle rules such as 30-day retention. When AWS Organizations integration is enabled, a delegated administrator in the management account can enforce these plans across all member accounts without additional scripting. Data Lifecycle Manager is account-scoped and does not support cross-account governance. Manual Lambda or custom Systems Manager Automation solutions introduce unneeded operational overhead, while snapshot copy commands alone lack automated selection and retention management.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.