ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam
Go to Exam

Exam AWS Certified Developer Associate topic 1 question 266 discussion

Exam question from Amazon's AWS Certified Developer Associate
Question #: 266
Topic #: 1
[All AWS Certified Developer Associate Questions]

A developer wants to expand an application to run in multiple AWS Regions. The developer wants to copy Amazon Machine Images (AMIs) with the latest changes and create a new application slack in the destination Region. According to company requirements, all AMIs must be encrypted in all Regions. However, not all the AMIs that the company uses are encrypted.

How can the developer expand the application to run in the destination Region while meeting the encryption requirement?

  • A. Create a new AMIs, and specify encryption parameters. Copy the encrypted AMIs to the destination Region. Delete the unencrypted AMIs.
  • B. Use AWS Key Management Service (AWS KMS) to enable encryption on the unencrypted AMIs. Copy the encrypted AMIs to the destination Region.
  • C. Use AWS Certificate Manager (ACM) to enable encryption on the unencrypted AMIs. Copy the encrypted AMIs to the destination Region.
  • D. Copy the unencrypted AMIs to the destination Region. Enable encryption by default in the destination Region.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by k1kavi1 at Nov. 26, 2022, 6:04 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ezeik
Highly Voted 2 years, 2 months ago
Selected Answer: A
correct is A https://www.intelligentdiscovery.io/controls/ami/ami-encrypted
upvoted 5 times
...
zzw890827
Most Recent 1 year, 6 months ago
Selected Answer: B
A is wrong, you cannot directly specify encryption parameters on the source AMIs if they are already created and unencrypted. T
upvoted 1 times
BrainFried
8 months, 3 weeks ago
That's why it says "Create new AMIs". The answer then encrypts these new AIMs and uses them in the destination region. The source AMIs are deleted, since they were created in an unencrypted state.
upvoted 1 times
...
...
KT_Yu
2 years, 3 months ago
Selected Answer: B
An encrypted snapshot that you do not own (that is, the AMI is shared with you) is copied to a snapshot that is encrypted by your AWS account's default KMS key.
upvoted 1 times
...
michaldavid
2 years, 5 months ago
Selected Answer: B
Agree with B
upvoted 1 times
...
k1kavi1
2 years, 5 months ago
Selected Answer: B
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIEncryption.html
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago