Data-Engineer-Associate Exam Dumps : AWS Certified Data Engineer - Associate (DEA-C01)

To perform cross-Region snapshot copying of an encrypted Redshift cluster, AWS documentation and the exam study guide clearly outline two essential steps:

You must create a snapshot copy grant in thedestination Region.This allows Amazon Redshift to encrypt the snapshots using the specified AWS KMS key.

You must enable snapshot copying in thesource Regionand specify the name of the snapshot copy grant that was created in thedestination Region.

From the study guide:

“To enable cross-region copy of encrypted snapshots, you must create a snapshot copy grant in the destination Region and enable snapshot copying in the source Region by specifying the snapshot copy grant name.”

–Ace the AWS Certified Data Engineer - Associate Certification - version 2 - apple.pdf

OptionE(Multi-AZ deployment) is not applicable to Amazon Redshift, which does not support Multi-AZ configurations like Amazon RDS.

The AWS Transfer Family server's security policy can be updated to enforceTLS 1.2or higher, ensuring compliance with company policy for encrypted data transfers.

AWS Transfer Family Security Policy:

AWS Transfer Family supports setting aminimum TLS versionthrough its security policy configuration. This ensures that only connections using TLS 1.2 or above are allowed.

AWS Database Migration Service (AWS DMS)is purpose-built to migrate and continuously replicate data from both AWS-hosted and on-premises databases. It supports full-load (existing data) andchange data capture (CDC)for ongoing changes, making itthe most cost-effective and operationally simplesolution in this scenario.

“DMS supports both full-load and continuous replication via CDC. This enables replicating existing and future data from various sources to a data lake in Amazon S3.”

–Ace the AWS Certified Data Engineer - Associate Certification - version 2 - apple.pdf

AWS Glue is not suitable for real-time CDC replication across hybrid environments.