nerdexam
Amazon

DBS-C01 · Question #217

A finance company migrated its 3 ТВ on-premises PostgreSQL database to an Amazon Aurora PostgreSQL DB cluster. During a review after the migration, a database specialist discovers that the database…

The correct answer is B. Take a snapshot of the unencrypted DB cluster and restore it to a new DB cluster with encryption. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Overview.Encryption.html

Submitted by tunde_lagos· Mar 6, 2026Database Security

Question

A finance company migrated its 3 ТВ on-premises PostgreSQL database to an Amazon Aurora PostgreSQL DB cluster. During a review after the migration, a database specialist discovers that the database is not encrypted at rest. The database must be encrypted at rest as soon as possible to meet security requirements. The database specialist must enable encryption for the DB cluster with minimal downtime. Which solution will meet these requirements?

Options

  • AModify the unencrypted DB cluster using the AWS Management Console. Enable encryption and
  • BTake a snapshot of the unencrypted DB cluster and restore it to a new DB cluster with encryption
  • CCreate an encrypted Aurora Replica of the unencrypted DB cluster. Promote the Aurora Replica
  • DCreate a new DB cluster with encryption enabled and use the pg_dump and pg_restore utilities to

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    71% (34)
  • C
    8% (4)
  • D
    17% (8)

Explanation

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Overview.Encryption.html

Topics

#Aurora PostgreSQL#Encryption at rest#Snapshot restore#Minimal downtime

Community Discussion

No community discussion yet for this question.

Full DBS-C01 Practice