SAA-C03 Q65 · Monitoring

Question

A company runs several custom applications on Amazon EC2 instances. Each team within the company manages its own set of applications and backups. To comply with regulations, the company must be able to report on the status of backups and ensure that backups are encrypted. Which solution will meet these requirements with the LEAST effort?

Accepted Answer

**Answer D** uses two purpose-built AWS managed services that directly address every requirement with minimal custom effort:

1. **Backup status reporting**: AWS Backup Audit Manager is specifically designed to generate compliance reports for backups. It provides out-of-the-box frameworks that track backup activity across your AWS environment — no custom code needed.

2. **Encryption compliance**: AWS Backup Audit Manager includes built-in controls such as `BACKUP_RESOURCES_PROTECTED_BY_BACKUP_VAULT_LOCK` and `BACKUP_RECOVERY_POINT_ENCRYPTED`. These controls automatically check whether backups are encrypted.

3. **AWS Config integration**: AWS Config continuously monitors and records resource configurations. AWS Backup Audit Manager leverages AWS Config rules under the hood to evaluate com

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips