exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Exam AWS-SysOps topic 1 question 165 discussion

Exam question from Amazon's AWS-SysOps
Question #: 165
Topic #: 1
[All AWS-SysOps Questions]

A user is trying to launch an EBS backed EC2 instance under free usage. The user wants to achieve encryption of the EBS volume. How can the user encrypt the data at rest?

  • A. Use AWS EBS encryption to encrypt the data at rest
  • B. The user cannot use EBS encryption and has to encrypt the data manually or using a third party tool
  • C. The user has to select the encryption enabled flag while launching the EC2 instance
  • D. Encryption of volume is not available as a part of the free usage tier
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
AWS EBS supports encryption of the volume while creating new volumes. It supports encryption of the data at rest, the I/O as well as all the snapshots of the EBS volume. The EBS supports encryption for the selected instance type and the newer generation instances, such as m3, c3, cr1, r3, g2. It is not supported with a micro instance.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
BATSIE
8 months ago
Selected Answer: A
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-encrypt-existing-and-new-amazon-ebs-volumes.html
upvoted 1 times
...
albert_kuo
1 year, 1 month ago
Selected Answer: A
Encryption is allowed on micro instances
upvoted 1 times
...
TroyMcLure
3 years ago
Correct Answer: C The flag for encryption must be enabled first. It's available for the free usage tier .
upvoted 2 times
...
billcayman
3 years ago
Answer is C.
upvoted 1 times
...
JGD
3 years ago
Answer: A. Small glimse Supported instance types Amazon EBS encryption is available on the instance types listed below. You can attach both encrypted and unencrypted volumes to these instance types simultaneously. General purpose: A1, M3, M4, M5, M5a, M5ad, M5d, M5dn, M5n, M6g, T2, T3, and T3a Earlier it was not allowed in free tier, so the answer was B.
upvoted 1 times
...
jgtran
3 years ago
Answer is A.
upvoted 1 times
...
Kilonso
3 years ago
I would think the answer should be C
upvoted 1 times
...
joyjyothi
3 years ago
No one check what the question is asked “free tier”, so only micro instances are eligible on free tire. Other instances can be use but not part of the free tier. So answer is B. Need to use third party software.
upvoted 1 times
...
narayanan010
3 years, 1 month ago
Could anyone please confirm if we can encrypt EBS Volumes once they are already created?
upvoted 1 times
...
jadoxo
3 years, 1 month ago
Answer is "C"
upvoted 1 times
...
AWS_Noob
3 years, 1 month ago
Answer is C. It says in the beginning "A user is trying to launch..." Hence, when launching an EC2, the user can select the option to encrypt the drive. If the question said something like " A user is trying the encrypt the EBS volumes on one of his EBS drives, attached to an EC2 instance". (A) would have been a possibility, however, remember you can't just encrypt an unencrypted EBS Volume on the fly like that. Just FYI
upvoted 3 times
...
awscertified
3 years, 1 month ago
C. The user has to select the encryption enabled flag while launching the EC2 instance
upvoted 1 times
...
nicat
3 years, 1 month ago
"It is not supported with a micro instance. " It is not true. You can do it with a micro.
upvoted 1 times
...
karmaah
3 years, 1 month ago
Bad Question > I dont undestand this question. whether they want to encrypt data at rest after launching or before launching..? Question says ..trying to launch that means not launched yet. But end of the sentence says data at rest..
upvoted 1 times
...
karmaah
3 years, 1 month ago
The user has to select the encryption enabled flag while volume section. They triggered here.
upvoted 3 times
karmaah
3 years, 1 month ago
I tested in free tier. Encryption of volume is available as a part of the free usage tie
upvoted 6 times
ramilano
3 years ago
yeah you are right, i also tried and want to say that bulshit answer is C
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago