exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Exam AWS-SysOps topic 1 question 307 discussion

Exam question from Amazon's AWS-SysOps
Question #: 307
Topic #: 1
[All AWS-SysOps Questions]

How can you secure data at rest on an EBS volume?

  • A. Encrypt the volume using the S3 server-side encryption service.
  • B. Attach the volume to an instance using EC2's SSL interface.
  • C. Create an IAM policy that restricts read and write access to the volume.
  • D. Write the data randomly instead of sequentially.
  • E. Use an encrypted file system m top of the EBS volume.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/policies_examples.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
saumenP
Highly Voted 2 years, 7 months ago
it should be E http://jayendrapatil.com/aws-securing-data-at-rest/
upvoted 10 times
...
albert_kuo
Most Recent 11 months ago
Selected Answer: E
To secure data at rest on an EBS (Elastic Block Store) volume, one effective approach is to use an encrypted file system on top of the EBS volume.
upvoted 1 times
...
antthomas
2 years, 3 months ago
Selected Answer: E
E File system level encryption usually works by stacking an encrypted file system on top of an existing file system. This method is typically used to encrypt a specific directory
upvoted 1 times
...
TroyMcLure
2 years, 6 months ago
Correct Answer: E
upvoted 1 times
...
gretch
2 years, 7 months ago
E File system level encryption usually works by stacking an encrypted file system on top of an existing file system. This method is typically used to encrypt a specific directory
upvoted 1 times
...
dennismp
2 years, 7 months ago
E is the better ans, as it asked "data at rest" not "data access"...IAM could control data access but the data residing there not wide accessible!
upvoted 1 times
...
awscertified
2 years, 7 months ago
E. Use an encrypted file system m top of the EBS volume.
upvoted 1 times
...
kteng
2 years, 7 months ago
the question here to secure the data at rest on the EBS volume, and E typically use to protect specific directory/fs only instead of the whole EBS. I do have doubt on the ans C as well, but I still think C is better than E in this case.
upvoted 2 times
...
karmaah
2 years, 7 months ago
Ans is E that everyone knows
upvoted 3 times
...
RGT
2 years, 7 months ago
yeah, agreed. if you restrict read and write access tot he volume, there is no data to protect
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago