Backups must survive compromise of the production account itself — an attacker with admin access shouldn't be able to destroy recovery points. What's the resilience pattern?
A.More frequent backup schedules in the same account
Same account = same compromise radius.
B.AWS Backup cross-account copy to a dedicated backup/security account, plus Vault Lock
Correct. Separate account + immutability.
C.S3 versioning in the same account
Versioning lives in the same account/bucket.
D.Larger backup retention
Retention length doesn't change who can delete them.
Why this answer
Cross-account backup copies put recovery points outside the blast radius of a compromised account — combined with Vault Lock (WORM) they're undeletable even by admins. Same-account copies share the same failure domain.
Correct answer: B · Last reviewed 2026-11-04
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Reliability & DR practice session.
Practice Reliability & DR