Q19 — AWS SAA-C03 Ch.13

Question 19 of 100 | ← Chapter 13

Q919. A company is migrating its workloads to AWS. The company has sensitive and critical data in on-premises relational databases that run on SQL Server instances.The company wants to use the AWS Cloud to increase security and reduce operational overhead for the databases.Which solution will meet these requirements?

Correct Answer: B. Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.

Explanation

To meet the company's requirements of increasing security and reducing operational overhead for its sensitive and critical data in on-premises relational databases running on SQL Server instances, the most suitable solution is:B. Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.Option B suggests migrating the databases to a Multi-AZ Amazon RDS for SQL Server DB instance. Amazon RDS (Relational Database Service) provides a managed database service that simplifies database administration tasks and offers features for improving security and availability.Using a Multi-AZ deployment for the Amazon RDS DB instance ensures high availability and data durability. In case of a failure in one Availability Zone, the workload automatically fails over to a standby replica in another Availability Zone, minimizing downtime.By utilizing an AWS Key Management Service (AWS KMS) AWS managed key for encryption, the company can enhance the security of its data at rest. AWS KMS provides a secure and scalable key management solution that allows for centralized control and encryption of sensitive data.Option A suggests migrating the databases to Amazon EC2 instances and using an AWS managed key for encryption. While this option provides more control over the underlying infrastructure, it also requires the company to manage the EC2 instances, increasing operational overhead.Option C suggests migrating the data to an Amazon S3 bucket and using Amazon Macie to ensure data security. However, Amazon S3 is an object storage service and may not be suitable for hosting relational databases directly. Amazon Macie is a service for discovering, classifying, and protecting sensitive data, but it is not specifically designed for database security and management.Option D suggests migrating the databases to an Amazon DynamoDB table and using Amazon CloudWatch Logs for data security. However, DynamoDB is a NoSQL database service and may not be compatible with the company's existing SQL Server databases. CloudWatch Logs is primarily used for monitoring and logging, rather than securing relational databases.In summary, option B, migrating the databases to a Multi-AZ Amazon RDS for SQL Server DB instance and using an AWS KMS AWS managed key for encryption, provides a managed and secure solution for hosting the company's sensitive and critical data in the AWS Cloud, while reducing operational overhead.