ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam
Go to Exam

Exam AWS-SysOps topic 1 question 664 discussion

Exam question from Amazon's AWS-SysOps
Question #: 664
Topic #: 1
[All AWS-SysOps Questions]

An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.
How can this be resolved?

  • A. Enable encryption on each host's connection to the Amazon EFS volume. Each connection must be recreated for encryption to take effect.
  • B. Enable encryption on the existing EFS volume by using the AWS Command Line Interface.
  • C. Enable encryption on each host's local drive. Restart each host to encrypt the drive.
  • D. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Moon at Nov. 10, 2019, 1:20 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Moon
Highly Voted 8 months, 4 weeks ago
D is correct. https://docs.aws.amazon.com/efs/latest/ug/efs-enforce-encryption.html
upvoted 10 times
...
RicardoD
Most Recent 7 months, 3 weeks ago
D is the answer To encrypt data living on an non-encrypted EFS, you will need to create a new encrypted one, migrate the data and reconnect to each EC2
upvoted 2 times
...
abhishek_m_86
7 months, 3 weeks ago
D. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.
upvoted 2 times
...
jackdryan
8 months ago
I'll go with D
upvoted 2 times
...
MFDOOM
8 months, 1 week ago
D. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.
upvoted 2 times
...
gilbertlelancelo
8 months, 1 week ago
D. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.
upvoted 1 times
...
waterzhong
8 months, 2 weeks ago
D。。 If you want to delete an unencrypted-at-rest file system but want to retain the data, first create a new encrypted-at-rest file system. Next, copy the data over to the new encrypted-at-rest file system. After the data is copied over, you can delete the unencrypted-at-rest file system.
upvoted 1 times
...
shammous
8 months, 2 weeks ago
D is right. Only S3 can be encrypted on the fly. All the other services (RDS, EBS and EFS) needs new instances creation, encryption and data copying.
upvoted 3 times
...
professor
8 months, 2 weeks ago
D seems right
upvoted 2 times
...
cloud
8 months, 2 weeks ago
D. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel