Exam AWS Certified Database - Specialty topic 1 question 139 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 139
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company is using an Amazon RDS for MySQL DB instance for its internal applications. A security audit shows that the DB instance is not encrypted at rest. The company's application team needs to encrypt the DB instance.
What should the team do to meet this requirement?

A. Stop the DB instance and modify it to enable encryption. Apply this setting immediately without waiting for the next scheduled RDS maintenance window.
B. Stop the DB instance and create an encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.
C. Stop the DB instance and create a snapshot. Copy the snapshot into another encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.
D. Create an encrypted read replica of the DB instance. Promote the read replica to master. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.

Show Suggested Answer

Suggested Answer: C 🗳️

by novak18 at April 2, 2021, 7:57 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Jaypdv

Highly Voted 3 years, 7 months ago

C. Answer

upvoted 8 times

...

shantest1

Highly Voted 3 years, 7 months ago

C. Answer

upvoted 5 times

...

Pranava_GCP

Most Recent 1 year, 8 months ago

Selected Answer: C

C is correct. You can only enable encryption during copy of the snapshot or when you create DB instance .

upvoted 2 times

...

sirfans

2 years, 7 months ago

Selected Answer: C

C is the right choice. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

upvoted 2 times

...

novice_expert

3 years, 1 month ago

Selected Answer: C

C. Stop the DB instance and create a snapshot. Copy the snapshot into another encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.

upvoted 3 times

...