An organization’s security policy requires multiple copies of all critical data to be replicated across
at least a primary and backup data center. The organization has decided to store some critical
data on Amazon S3.
Which option should you implement to ensure this requirement is met?
A.
Use the S3 copy API to replicate data between two S3 buckets in different regions
B.
You do not need to implement anything since S3 data is automatically replicated between
regions
C.
Use the S3 copy API to replicate data between two S3 buckets in different facilities within an
AWS Region
D.
You do not need to implement anything since S3 data is automatically replicated between
multiple facilities within an AWS Region
Answer is B
sorry answer is D
yes s3 is already replicated to among AZs. so Ans is D
D
d
They don’t state where their backup data center is but according to NIST standards they need to store it in a geographically separated data-center. I am not sure that data-centers within a single region meet this criteria so A would work although it may not be the answer they expect.
Let me add from NIST 800-53 CP-4 (and other controls) Required Geographical Separation is presented as:
(1) The organization identifies an alternate storage site that is geographically separated from the primary storage site so as not to be susceptible to the same hazards.
Both being close to the east coast may not be good.
D
I still think it’s D, but this could add to your argument a touch:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
Amazon EC2 is hosted in multiple locations world-wide. These locations are composed of regions and Availability Zones. Each region is a separate geographic area. Each region has multiple, isolated locations known as Availability Zones. Amazon EC2 provides you the ability to place resources, such as instances, and data in multiple locations. Resources aren’t replicated across regions unless you do so specifically.
Answer is B as internally S3 stores data in 5 diff Locations. So it has to be Cross Region.
Answer is d, we dont need cross region (only primary and backup data center is mentioned which is basically Az’s), which needs to be implemented with an additional step:
http://docs.aws.amazon.com/AmazonS3/latest/dev/crr.html