DR policy requires encrypted backups of RDS and EBS in a second region, managed under one policy with retention rules. What's the simplest compliant approach?
A.Manual snapshot copies via Lambda on a schedule
Doable but fragile — scheduling, retention, encryption, and monitoring all land on you.
B.AWS Backup plan with a cross-region copy rule to a vault in the DR region
Correct. One backup plan covers RDS + EBS with a copy rule to the DR region.
C.S3 replication of the database files
S3 replication copies objects — not live RDS/EBS state.
D.Multi-AZ deployment of each resource
Multi-AZ protects against AZ failure, not region loss.
Why this answer
AWS Backup centralizes backup policies across services — a single plan handles scheduling, retention, and cross-region copy to a second vault (optionally cross-account). Custom snapshot Lambda reinvents managed functionality.
Correct answer: B · Last reviewed 2026-11-01
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Disaster Recovery practice session.
Practice Disaster Recovery