FAQ Flashcards

1
Q

What is AWS Backup?

A

A fully managed service that enables you to centralize and automate data protection across on-premises and AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How does AWS Backup work?

A

Allows you to define a central data protection policy (called a backup plan) that works across AWS services for compute, storage, and databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Why should I use AWS Backup?

A

Protecting your data is an important step towards ensuring that you meet your business and regulatory compliance requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the key features of AWS Backup?

A

AWS Backup provides a centralized console, automated backup scheduling, backup retention management, and backup monitoring and alerting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What can I back up using AWS Backup?

A

Amazon Elastic Block Store (EBS) volumes,
Amazon Elastic Compute Cloud (EC2) instances (including Windows applications),
Amazon Relational Database Service (RDS) databases (including Amazon Aurora clusters),
Amazon DynamoDB tables,
Amazon Elastic File System (EFS) file systems,
Amazon FSx for Windows File Server file systems,
Amazon FSx for Lustre file systems,
Amazon Neptune databases,
Amazon DocumentDB (with MongoDB compatibility) databases,
AWS Storage Gateway volumes,
Amazon Simple Storage Service (S3).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can I use AWS Backup to back up on-premises data?

A

Yes, you can use AWS Backup to back up your on-premises Storage Gateway volumes and VMware virtual machines, providing a common way to manage the backups of your application data both on premises and on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can I use AWS Backup to access backups created by services with existing backup capabilities?

A

Yes. Backups created using services with existing backup capabilities, such as EBS Snapshots, can be accessed using AWS Backup.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does AWS Backup work with other AWS services that have backup capabilities?

A

All existing per-service backup capabilities remain unchanged. AWS Backup provides a common way to manage backups across AWS services both on AWS and on premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does AWS Backup relate to Amazon Data Lifecycle Manager and when should I use one over the other?

A

DLM provides a simple way to manage the lifecycle of EBS resources, such as volume snapshots. You should use DLM when you want to automate the creation, retention, and deletion of EBS Snapshots.

You should use AWS Backup to manage and monitor backups across the AWS services you use, including EBS volumes, from a single place.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a recovery point?

A

A recovery point represents the content of a resource at a specified time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a backup plan?

A

A backup plan is a policy expression that defines when and how you want to back up your AWS resources, such as DynamoDB tables or EFS file systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a backup vault?

A

A backup vault (or backup storage vault) is an encrypted storage location in your AWS account that stores and organizes your backups (recovery points).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How does the AWS Backup lifecycle feature work?

A

The AWS Backup lifecycle feature allows you to automatically transition your recovery points from a warm storage tier to a lower-cost cold storage tier.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How does encryption work in AWS Backup?

A

Backups for Amazon EFS, Amazon DynamoDB, Amazon S3, and VMware virtual machines are encrypted in transit and at rest independently from the source services, giving your backups an additional layer of protection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do I use access policies in a backup vault to control access to backups?

A

AWS Backup allows you to set resource-based policies on backup vaults, enabling you to control access to the backup vault and the backups in it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What services provide support for AWS Backup advanced features?

A

Services that have backup functionality built on AWS Backup support additional backup features, such as lifecycle tiering of backups to a low-cost storage tier, backup storage and encryption that is independent from its source data, and backup access policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is AWS Backup Audit Manager?

A

AWS Backup Audit Manager allows you to audit and report on the compliance of your data protection policies to help you meet your business and regulatory needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why should I use AWS Backup Audit Manager?

A

You should use AWS Backup Audit Manager if you want to verify that the workloads that you create in (or migrate to) AWS meet your data protection requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can I use AWS Backup Audit Manager?

A

You can use AWS Backup Audit Manager via the AWS Management Console, CLI, API, or SDK. AWS Backup Audit Manager provides built-in compliance controls and allows you to customize these controls to define your data protection policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a Backup Audit Manager control and framework?

A

An AWS Backup Audit Manager control is a procedure designed to audit the compliance of a backup requirement, such as backup frequency or backup retention period.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How does a Backup Audit Manager control work?

A

An AWS Backup Audit Manager control evaluates the configuration of your backup resources against your defined configuration settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How can I view the compliance results of my Backup Audit Manager controls and frameworks?

A

On the AWS Backup console, you can navigate to the Backup Audit Manager Frameworks section and click on the framework name to view the compliance status of your framework and controls.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What kind of reports can I create in Backup Audit Manager?

A

You can create reports related to your AWS Backup activity. These reports help you get details of your backup, copy, and restore jobs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How does AWS Backup Audit Manager work with other AWS services?

A

AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which compliance programs does AWS Backup support?

A

AWS has the longest-running compliance program in the cloud and is committed to helping customers navigate their requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Is AWS Backup PCI compliant?

A

Yes. AWS Backup is PCI-DSS compliant, which means you can use it to transfer payment information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Is AWS Backup HIPAA eligible?

A

Yes. AWS Backup is HIPAA eligible, which means if you have a HIPAA BAA in place with AWS, you can use AWS Backup to transfer protected health information (PHI).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is AWS Backup Vault Lock?

A

AWS Backup Vault Lock is a feature that enables you to prevent changes to backup lifecycle as well as prevent manual deletion of backups, helping you meet your compliance requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Why should I use AWS Backup Vault Lock?

A

You should use AWS Backup Vault Lock to ensure that no user, including administrators or perpetrators of malicious actions, can delete your backups or change their lifecycle settings such as retention periods and transition to cold storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How does AWS Backup Vault Lock differ from Amazon S3 Glacier Vault Lock?

A

While AWS Backup Vault Lock applies to data residing in your AWS Backup backup vault, Amazon S3 Glacier Vault Lock applies to an individual Amazon S3 Glacier Vault.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How does AWS Backup Vault Lock work?

A

AWS Backup Vault Lock is an optional configuration at the AWS Backup vault level and comprises three properties: minimum acceptable retention days, maximum acceptable retention days, and a cooling-off period. It blocks backup deletion operations and changes to their lifecycle.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

How does AWS Backup for Amazon S3 work?

A

AWS Backup allows you to define a central backup policy to manage backup and restore for your application across AWS services for compute, storage, and database services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

How are these capabilities different from what Amazon S3 provides?

A

Both AWS Backup and Amazon S3 offer capabilities that help you manage the business continuity of your applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Can I use an existing backup plan in AWS Backup to start backing up Amazon S3?

A

Yes, if you already have a backup plan for your application and you want to use the same backup plan for S3, simply add your S3 resources to the existing backup plan using tags or S3 bucket ARNs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What backup options are available in AWS Backup for Amazon S3?

A

You have two backup options available for S3 resources in AWS Backup: continuous and periodic. Continuous backups allow you to restore S3 resources to any point in time within the last 35 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Are there any prerequisites to creating backups of S3 buckets?

A

Yes, turning on S3 Versioning is a prerequisite to creating backups of S3 buckets and objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How does AWS Backup help with VMware data protection?

A

AWS Backup extends its in-cloud, fully managed service capabilities to your VMware environment, helping you provide a unified view of backups across your AWS and on-premises AWS environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

How does AWS Backup support for VMware work?

A

AWS Backup connects to VMware workloads using AWS Backup gateway, which you’ll deploy in your VMware environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which VMware versions and features do you support using AWS Backup?

A

AWS Backup supports VMware ESXi 6.7.X, and 7.0.X VMs running on NFS, VMFS, and VSAN datastores on premises, in VMware CloudTM on AWS, and on VMware CloudTM on AWS Outposts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Where can I restore VMware backups?

A

You can restore VMware backups to a new on-premises VMware virtual host, VMware CloudTM on AWS, VMware CloudTM on AWS Outposts, or Amazon EBS from the AWS Backup console.

41
Q

Can I transition VMware backups to a cold storage tier?

A

Yes, based on your organizational needs, you can configure lifecycle policies in AWS Backup to automatically transition your VMware backups from warm storage to low-cost cold storage.

42
Q

What backup modes do you support for VMware?

A

AWS Backup supports first full, then incremental-forever backups of VMware VMs that you can create on demand or via the schedule as configured in your backup plan.

43
Q

What level of consistency do you support for VMware backups?

A

AWS Backup, by default, captures app-consistent backups of VMware VMs using the VMware Tools quiescence setting on the VM.

44
Q

Does AWS Backup support compression for VMware backups?

A

Yes, AWS Backup compresses VMware backups in transit to AWS, enabling you to optimally use your network connection to AWS.

45
Q

Are my VMware backups encrypted?

A

Yes, your VM backups are encrypted in transit and at rest using AES-256 encryption algorithm. You can also use customer-managed keys to encrypt backups stored in the cloud.

46
Q

Can I copy VMware backups to another AWS Region?

A

Yes, you can store a copy of VMware backups in a different AWS Region from your production backups, helping you to more easily meet business continuity, disaster recovery, and compliance requirements.

47
Q

Can I copy VMware backups to another AWS account?

A

Yes, you can copy VMware backups to another AWS account, enabling you to use backups between your production and dev/test environments, or between different department and project accounts.

48
Q

How much network bandwidth do I need to back up VMware VMs to AWS?

A

The network bandwidth you need depends on the number of VMware VMs you want to protect, the size of each VM, incremental data generated per VM, and your backup window and restore requirements.

49
Q

What type of network connection do I use to back up VMware VMs to AWS?

A

You can use both AWS Direct Connect and VPN over the Internet to back up VMware VMs to AWS.

50
Q

Reversed

A fully managed service that enables you to centralize and automate data protection across on-premises and AWS services.

A

What is AWS Backup?

51
Q

Reversed

Allows you to define a central data protection policy (called a backup plan) that works across AWS services for compute, storage, and databases.

A

How does AWS Backup work?

52
Q

Reversed

Protecting your data is an important step towards ensuring that you meet your business and regulatory compliance requirements.

A

Why should I use AWS Backup?

53
Q

Reversed

AWS Backup provides a centralized console, automated backup scheduling, backup retention management, and backup monitoring and alerting.

A

What are the key features of AWS Backup?

54
Q

Reversed

Amazon Elastic Block Store (EBS) volumes,
Amazon Elastic Compute Cloud (EC2) instances (including Windows applications),
Amazon Relational Database Service (RDS) databases (including Amazon Aurora clusters),
Amazon DynamoDB tables,
Amazon Elastic File System (EFS) file systems,
Amazon FSx for Windows File Server file systems,
Amazon FSx for Lustre file systems,
Amazon Neptune databases,
Amazon DocumentDB (with MongoDB compatibility) databases,
AWS Storage Gateway volumes,
Amazon Simple Storage Service (S3).

A

What can I back up using AWS Backup?

55
Q

Reversed

Yes, you can use AWS Backup to back up your on-premises Storage Gateway volumes and VMware virtual machines, providing a common way to manage the backups of your application data both on premises and on AWS.

A

Can I use AWS Backup to back up on-premises data?

56
Q

Reversed

Yes. Backups created using services with existing backup capabilities, such as EBS Snapshots, can be accessed using AWS Backup.

A

Can I use AWS Backup to access backups created by services with existing backup capabilities?

57
Q

Reversed

All existing per-service backup capabilities remain unchanged. AWS Backup provides a common way to manage backups across AWS services both on AWS and on premises.

A

How does AWS Backup work with other AWS services that have backup capabilities?

58
Q

Reversed

DLM provides a simple way to manage the lifecycle of EBS resources, such as volume snapshots. You should use DLM when you want to automate the creation, retention, and deletion of EBS Snapshots.

You should use AWS Backup to manage and monitor backups across the AWS services you use, including EBS volumes, from a single place.

A

How does AWS Backup relate to Amazon Data Lifecycle Manager and when should I use one over the other?

59
Q

Reversed

A recovery point represents the content of a resource at a specified time.

A

What is a recovery point?

60
Q

Reversed

A backup plan is a policy expression that defines when and how you want to back up your AWS resources, such as DynamoDB tables or EFS file systems.

A

What is a backup plan?

61
Q

Reversed

A backup vault (or backup storage vault) is an encrypted storage location in your AWS account that stores and organizes your backups (recovery points).

A

What is a backup vault?

62
Q

Reversed

The AWS Backup lifecycle feature allows you to automatically transition your recovery points from a warm storage tier to a lower-cost cold storage tier.

A

How does the AWS Backup lifecycle feature work?

63
Q

Reversed

Backups for Amazon EFS, Amazon DynamoDB, Amazon S3, and VMware virtual machines are encrypted in transit and at rest independently from the source services, giving your backups an additional layer of protection.

A

How does encryption work in AWS Backup?

64
Q

Reversed

AWS Backup allows you to set resource-based policies on backup vaults, enabling you to control access to the backup vault and the backups in it.

A

How do I use access policies in a backup vault to control access to backups?

65
Q

Reversed

Services that have backup functionality built on AWS Backup support additional backup features, such as lifecycle tiering of backups to a low-cost storage tier, backup storage and encryption that is independent from its source data, and backup access policies.

A

What services provide support for AWS Backup advanced features?

66
Q

Reversed

AWS Backup Audit Manager allows you to audit and report on the compliance of your data protection policies to help you meet your business and regulatory needs.

A

What is AWS Backup Audit Manager?

67
Q

Reversed

You should use AWS Backup Audit Manager if you want to verify that the workloads that you create in (or migrate to) AWS meet your data protection requirements.

A

Why should I use AWS Backup Audit Manager?

68
Q

Reversed

You can use AWS Backup Audit Manager via the AWS Management Console, CLI, API, or SDK. AWS Backup Audit Manager provides built-in compliance controls and allows you to customize these controls to define your data protection policies.

A

How can I use AWS Backup Audit Manager?

69
Q

Reversed

An AWS Backup Audit Manager control is a procedure designed to audit the compliance of a backup requirement, such as backup frequency or backup retention period.

A

What is a Backup Audit Manager control and framework?

70
Q

Reversed

An AWS Backup Audit Manager control evaluates the configuration of your backup resources against your defined configuration settings.

A

How does a Backup Audit Manager control work?

71
Q

Reversed

On the AWS Backup console, you can navigate to the Backup Audit Manager Frameworks section and click on the framework name to view the compliance status of your framework and controls.

A

How can I view the compliance results of my Backup Audit Manager controls and frameworks?

72
Q

Reversed

You can create reports related to your AWS Backup activity. These reports help you get details of your backup, copy, and restore jobs.

A

What kind of reports can I create in Backup Audit Manager?

73
Q

Reversed

AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

A

How does AWS Backup Audit Manager work with other AWS services?

74
Q

Reversed

AWS has the longest-running compliance program in the cloud and is committed to helping customers navigate their requirements.

A

Which compliance programs does AWS Backup support?

75
Q

Reversed

Yes. AWS Backup is PCI-DSS compliant, which means you can use it to transfer payment information.

A

Is AWS Backup PCI compliant?

76
Q

Reversed

Yes. AWS Backup is HIPAA eligible, which means if you have a HIPAA BAA in place with AWS, you can use AWS Backup to transfer protected health information (PHI).

A

Is AWS Backup HIPAA eligible?

77
Q

Reversed

AWS Backup Vault Lock is a feature that enables you to prevent changes to backup lifecycle as well as prevent manual deletion of backups, helping you meet your compliance requirements.

A

What is AWS Backup Vault Lock?

78
Q

Reversed

You should use AWS Backup Vault Lock to ensure that no user, including administrators or perpetrators of malicious actions, can delete your backups or change their lifecycle settings such as retention periods and transition to cold storage.

A

Why should I use AWS Backup Vault Lock?

79
Q

Reversed

While AWS Backup Vault Lock applies to data residing in your AWS Backup backup vault, Amazon S3 Glacier Vault Lock applies to an individual Amazon S3 Glacier Vault.

A

How does AWS Backup Vault Lock differ from Amazon S3 Glacier Vault Lock?

80
Q

Reversed

AWS Backup Vault Lock is an optional configuration at the AWS Backup vault level and comprises three properties: minimum acceptable retention days, maximum acceptable retention days, and a cooling-off period. It blocks backup deletion operations and changes to their lifecycle.

A

How does AWS Backup Vault Lock work?

81
Q

Reversed

AWS Backup allows you to define a central backup policy to manage backup and restore for your application across AWS services for compute, storage, and database services.

A

How does AWS Backup for Amazon S3 work?

82
Q

Reversed

Both AWS Backup and Amazon S3 offer capabilities that help you manage the business continuity of your applications.

A

How are these capabilities different from what Amazon S3 provides?

83
Q

Reversed

Yes, if you already have a backup plan for your application and you want to use the same backup plan for S3, simply add your S3 resources to the existing backup plan using tags or S3 bucket ARNs.

A

Can I use an existing backup plan in AWS Backup to start backing up Amazon S3?

84
Q

Reversed

You have two backup options available for S3 resources in AWS Backup: continuous and periodic. Continuous backups allow you to restore S3 resources to any point in time within the last 35 days.

A

What backup options are available in AWS Backup for Amazon S3?

85
Q

Reversed

Yes, turning on S3 Versioning is a prerequisite to creating backups of S3 buckets and objects.

A

Are there any prerequisites to creating backups of S3 buckets?

86
Q

Reversed

AWS Backup extends its in-cloud, fully managed service capabilities to your VMware environment, helping you provide a unified view of backups across your AWS and on-premises AWS environments.

A

How does AWS Backup help with VMware data protection?

87
Q

Reversed

AWS Backup connects to VMware workloads using AWS Backup gateway, which you’ll deploy in your VMware environment.

A

How does AWS Backup support for VMware work?

88
Q

Reversed

AWS Backup supports VMware ESXi 6.7.X, and 7.0.X VMs running on NFS, VMFS, and VSAN datastores on premises, in VMware CloudTM on AWS, and on VMware CloudTM on AWS Outposts.

A

Which VMware versions and features do you support using AWS Backup?

89
Q

Reversed

You can restore VMware backups to a new on-premises VMware virtual host, VMware CloudTM on AWS, VMware CloudTM on AWS Outposts, or Amazon EBS from the AWS Backup console.

A

Where can I restore VMware backups?

90
Q

Reversed

Yes, based on your organizational needs, you can configure lifecycle policies in AWS Backup to automatically transition your VMware backups from warm storage to low-cost cold storage.

A

Can I transition VMware backups to a cold storage tier?

91
Q

Reversed

AWS Backup supports first full, then incremental-forever backups of VMware VMs that you can create on demand or via the schedule as configured in your backup plan.

A

What backup modes do you support for VMware?

92
Q

Reversed

AWS Backup, by default, captures app-consistent backups of VMware VMs using the VMware Tools quiescence setting on the VM.

A

What level of consistency do you support for VMware backups?

93
Q

Reversed

Yes, AWS Backup compresses VMware backups in transit to AWS, enabling you to optimally use your network connection to AWS.

A

Does AWS Backup support compression for VMware backups?

94
Q

Reversed

Yes, your VM backups are encrypted in transit and at rest using AES-256 encryption algorithm. You can also use customer-managed keys to encrypt backups stored in the cloud.

A

Are my VMware backups encrypted?

95
Q

Reversed

Yes, you can store a copy of VMware backups in a different AWS Region from your production backups, helping you to more easily meet business continuity, disaster recovery, and compliance requirements.

A

Can I copy VMware backups to another AWS Region?

96
Q

Reversed

Yes, you can copy VMware backups to another AWS account, enabling you to use backups between your production and dev/test environments, or between different department and project accounts.

A

Can I copy VMware backups to another AWS account?

97
Q

Reversed

The network bandwidth you need depends on the number of VMware VMs you want to protect, the size of each VM, incremental data generated per VM, and your backup window and restore requirements.

A

How much network bandwidth do I need to back up VMware VMs to AWS?

98
Q

Reversed

You can use both AWS Direct Connect and VPN over the Internet to back up VMware VMs to AWS.

A

What type of network connection do I use to back up VMware VMs to AWS?