A company uses Amazon FSx for Windows File Server for EC2 instances with an SMB share in us-east-1. The company requires a 5-minute RPO for planned maintenance or unplanned disruptions, needs replication to us-west-2, and requires that the replicated data cannot be deleted by any user for 5 years. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an FSx for Windows File Server file system in us-east-1 with the Multi-AZ deployment type. Use AWS Backup to create a daily backup plan that copies backups to us-west-2. Configure AWS Backup Vault Lock in compliance mode for the target vault in us-west-2 with a minimum duration of 5 years..
Why this is the answer
The correct solution uses a Multi-AZ deployment type for FSx for Windows File Server to achieve the 5-minute RPO for planned maintenance or unplanned disruptions. Multi-AZ deployments provide automatic failover to a standby file server in a different Availability Zone, ensuring high availability and minimal downtime. AWS Backup is used to replicate data to us-west-2, and a daily backup plan satisfies the replication requirement. AWS Backup Vault Lock in compliance mode prevents any user, including the root user, from deleting backups for the specified 5-year duration, meeting the immutability requirement.
Incorrect options:
Single-AZ 2 deployment does not meet the 5-minute RPO for unplanned disruptions as it lacks automatic failover.
Governance mode for AWS Backup Vault Lock allows authorized users to modify or delete locked backups, which does not meet the requirement that replicated data cannot be deleted by any user.