Amazon
DBS-C01 · Question #149
A company is using an Amazon RDS for MySQL DB instance for its internal applications. A security audit shows that the DB instance is not encrypted at rest. The company's application team needs to…
The correct answer is C. Stop the DB instance and create a snapshot. You can only enable encryption during copy operation of the snapshot. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
Submitted by tyler.j· Mar 6, 2026Database Security
Question
A company is using an Amazon RDS for MySQL DB instance for its internal applications. A security audit shows that the DB instance is not encrypted at rest. The company's application team needs to encrypt the DB instance. What should the team do to meet this requirement?
Options
- AStop the DB instance and modify it to enable encryption.
- BStop the DB instance and create an encrypted snapshot.
- CStop the DB instance and create a snapshot.
- DCreate an encrypted read replica of the DB instance.
How the community answered
(42 responses)- A5% (2)
- B7% (3)
- C74% (31)
- D14% (6)
Explanation
You can only enable encryption during copy operation of the snapshot. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
Topics
#RDS MySQL#encryption at rest#snapshots#read replicas
Community Discussion
No community discussion yet for this question.