A municipal database backup must be copyable to a second AWS Region…

Question

A municipal database backup must be copyable to a second AWS Region for disaster recovery while remaining encrypted throughout. Which approach best meets that requirement at Associate depth?

Accepted Answer

Use encrypted snapshots or AWS Backup copies to the second Region, preserving encryption with appropriate KMS key patterns for cross-Region copy — DR copies should travel like sealed evidence bags—encrypted snapshots or Backup copies into Region B, still locked with KMS-aware patterns. Unencrypted emails and “we’ll encrypt after the breach” are not a municipal DR plan.

Answer

Copy unencrypted snapshots over the public internet and encrypt only after a breach is confirmed

Answer

Disable snapshots entirely and rely on a single AZ’s live volume as the DR strategy

Answer

Email nightly mysqldump files with passwords in the message body to an out-of-region volunteer

A municipal database backup must be copyable to a second AWS Region for disaster recovery while remaining encrypted throughout. Which approach best meets that requirement at Associate depth?

Short Explanation

Full Explanation