Exam AWS Certified Big Data - Specialty topic 1 question 36 discussion

Question 66 is the same

ACD is correct. Direct question from https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-db-encryption.html#working-with-aws-kms

my selection ACD

Here one option is missing C. Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key from the destination region. (Correct) https://chercher.tech/aws-certification/aws-certified-big-data-speciality-practice-exams-set-1 find here step by step AWS Redshift cross-region copy snapshot through the console (Question ask for CLI but both has same steps) https://www.youtube.com/watch?v=9DepoiBOe6o

i think ACD.

Before the snapshot is copied to the destination AWS Region, Amazon Redshift decrypts the snapshot using the master key in the source AWS Region and re-encrypts it temporarily using a randomly generated RSA key that Amazon Redshift manages internally. Amazon Redshift then copies the snapshot over a secure channel to the destination AWS Region, decrypts the snapshot using the internally managed RSA key, and then re-encrypts the snapshot using the master key in the destination AWS Region.

I would choose ACD though C is not accurate answer as suggested by Mattyb123

I agree with ACD.there was one more option as below. though that is wrong option. Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key from the source region.

ACD is correct

C option should be like Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key created in the destination region NOT source region

ACD is the correct answer

Agreed ACD.

acd ? anyone?