A company’s application uses many Amazon DynamoDB tables. Auditors determined the tables do not meet the company’s data protection policy. The policy requires backups twice per month at midnight on the 15th and 25th, with a retention period of 3 months. Which combination of actions should a security engineer take to comply? (Choose two.)

The correct options involve using AWS Backup and a cron schedule. AWS Backup is the centralized service for managing backups across AWS services, including DynamoDB. It allows you to create backup plans with defined rules for frequency and retention, directly addressing the policy requirements. A cron schedule expression (e.g., cron(0 0 15,25 ? )) is necessary to specify backups at midnight on the 15th and 25th of each month. Assigning all DynamoDB tables to this plan ensures comprehensive coverage. DynamoDB on-demand backup is for manual, immediate backups, not scheduled, recurring ones. AWS DataSync is for transferring data between storage services, not for scheduled DynamoDB backups. A rate schedule expression specifies backups at a fixed interval (e.g., every 12 hours) rather than specific dates, which doesn't meet the policy's precise timing.