Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 1 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 1
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance.
Which of these options would allow you to encrypt your data at rest? (Choose three.)

A. Implement third party volume encryption tools
B. Implement SSL/TLS for all services running on the server
C. Encrypt data inside your applications before storing it on EBS
D. Encrypt data using native data encryption drivers at the file system level
E. Do nothing as EBS volumes are encrypted by default

Show Suggested Answer

Suggested Answer: ACD 🗳️

by TI_FT at March 11, 2021, 3:14 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

[Removed]

Highly Voted 10 months ago

ACD is correct answer.

upvoted 11 times

...

KiraguJohn

Highly Voted 3 years, 6 months ago

Which of the following choices enables you to encrypt your data in transit? Why is SSL wrong?

upvoted 6 times

RVivek

3 years, 6 months ago

The question mentions "possible options for protecting data while storing it at rest" SSL/TLS is used for encrrypting data in transite

upvoted 1 times

...

krisvija12

3 years, 6 months ago

SSL/TLS encrypts data in transit and not in rest.

upvoted 5 times

...

dsg890789

Most Recent 2 months, 2 weeks ago

Selected Answer: ACD

ACD is correct

upvoted 1 times

...

Danilus

4 months, 3 weeks ago

Selected Answer: ACD

Key words: encryption of sensitive data at rest. A, C, D are the correct answers. Why not B? Because SSL/TLS are used for encrypting data in transit, not for data at rest. Why not E? You can encrypt an EBS volume, but it's not encrypted by default. You must specify encryption when creating the volume.

upvoted 1 times

...

koti_91848832

5 months ago

Selected Answer: ACD

A. Implement third-party volume encryption tools C. Encrypt data inside your applications before storing it on EBS D. Encrypt data using native data encryption drivers at the file system level

upvoted 1 times

...

student22

7 months, 3 weeks ago

Selected Answer: ACD

Answer: ACD

upvoted 1 times

...

Coffeinerd

10 months, 1 week ago

Selected Answer: ACD

ACD B - SSL/TLS is in-transit encryption, not at rest E - EBS is not encrypted by default

upvoted 3 times

...

amministrazione

10 months, 2 weeks ago

A. Implement third party volume encryption tools C. Encrypt data inside your applications before storing it on EBS D. Encrypt data using native data encryption drivers at the file system level

upvoted 1 times

...