A company uses an Amazon RDS for PostgreSQL DB instance for its customer relationship management (CRM) system. New compliance requirements specify that the database must be encrypted at rest. Which…

The correct answer is A. Create an encrypted copy of manual snapshot of the DB instance. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon- rds-for-postgresql-db-instance.html You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created. However, you can add encryption to an…

Submitted by joshua94· Mar 6, 2026Database Security

Question

A company uses an Amazon RDS for PostgreSQL DB instance for its customer relationship management (CRM) system. New compliance requirements specify that the database must be encrypted at rest. Which action will meet these requirements?

Options

ACreate an encrypted copy of manual snapshot of the DB instance.
BModify the DB instance and enable encryption.
CRestore a DB instance from the most recent automated snapshot and enable encryption.
DCreate an encrypted read replica of the DB instance.

How the community answered

(37 responses)

A
73% (27)
B
5% (2)
C
14% (5)
D
8% (3)

Explanation

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon- rds-for-postgresql-db-instance.html You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created. However, you can add encryption to an unencrypted DB instance by creating a snapshot of your DB instance, and then creating an encrypted copy of that snapshot. You can then restore a DB instance from the encrypted snapshot to get an encrypted copy of your original DB instance. The pattern uses AWS Database Migration Service (AWS DMS) to migrate data and AWS Key Management Service (AWS KMS) for encryption.

Topics

#RDS encryption at rest#PostgreSQL#Compliance#Data protection

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice