Exam AWS Certified Database - Specialty All Questions

View all questions & answers for the AWS Certified Database - Specialty exam

Exam AWS Certified Database - Specialty topic 1 question 160 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 160
Topic #: 1

[All AWS Certified Database - Specialty Questions]

An ecommerce company migrates an on-premises MongoDB database to Amazon DocumentDB (with MongoDB compatibility). After the migration, a database specialist realizes that encryption at rest has not been turned on for the Amazon DocumentDB cluster.
What should the database specialist do to enable encryption at rest for the Amazon DocumentDB cluster?

A. Take a snapshot of the Amazon DocumentDB cluster. Restore the unencrypted snapshot as a new cluster while specifying the encryption option, and provide an AWS Key Management Service (AWS KMS) key.
B. Enable encryption for the Amazon DocumentDB cluster on the AWS Management Console. Reboot the cluster.
C. Modify the Amazon DocumentDB cluster by using the modify-db-cluster command with the --storage-encrypted parameter set to true.
D. Add a new encrypted instance to the Amazon DocumentDB cluster, and then delete an unencrypted instance from the cluster. Repeat until all instances are encrypted.

Show Suggested Answer

Suggested Answer: A 🗳️

by Nots at Nov. 12, 2021, 2 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Nots

Highly Voted 3 years, 6 months ago

I'll go A. "Limitations for Amazon DocumentDB Encrypted Clusters You can enable or disable encryption at rest for an Amazon DocumentDB cluster only at the time that it is created, not after the cluster has been created. However, you can create an encrypted copy of an unencrypted cluster by creating a snapshot of the unencrypted cluster, and then restoring the unencrypted snapshot as a new cluster while specifying the encryption at rest option. " https://docs.aws.amazon.com/documentdb/latest/developerguide/encryption-at-rest.html

upvoted 16 times

johnconnor

3 years, 6 months ago

you are absolutely right, about 80% of the answers on this exam are wrong, if it wasn't for the comment sections it would be useless.

upvoted 6 times

...

Pranava_GCP

Most Recent 1 year, 8 months ago

Selected Answer: A

A is correct https://docs.aws.amazon.com/documentdb/latest/developerguide/encryption-at-rest.html#encryption-at-rest-limits "You can enable or disable encryption at rest for an Amazon DocumentDB cluster only at the time that it is created, not after the cluster has been created. However, you can create an encrypted copy of an unencrypted cluster by creating a snapshot of the unencrypted cluster, and then restoring the unencrypted snapshot as a new cluster while specifying the encryption at rest option."

upvoted 1 times

...

lollyj

2 years, 5 months ago

Selected Answer: A

went with this choice

upvoted 2 times

...

novice_expert

3 years, 1 month ago

Selected Answer: A

for DocumentDB only snapshot of the unencrypted cluster -> restoring the unencrypted snapshot as a new cluster while specifying the encryption at rest option.

upvoted 2 times

...

tugboat

3 years, 3 months ago

Selected Answer: A

correct

upvoted 2 times

...

jove

3 years, 6 months ago

Selected Answer: A

"... you can create an encrypted copy of an unencrypted cluster by creating a snapshot of the unencrypted cluster, and then restoring the unencrypted snapshot as a new cluster while specifying the encryption at rest option"

upvoted 3 times

...

GMartinelli

3 years, 6 months ago

Selected Answer: A

Option A

upvoted 2 times

...