A company is running a blogging platform. A security audit determines that the Amazon RDS DB instance that is used by the platform is not configured to encrypt the data at rest. The company must…

Question

Options

• ACreate a read replica of the DB instance, and enable encryption. When the read replica is
• BTake a snapshot of the DB instance. Make an encrypted copy of the snapshot. Restore the
• CCreate a new encrypted DB instance. Perform an initial data load, and set up logical replication
• DConvert the DB instance to an Amazon Aurora DB cluster, and enable encryption. When the DB

• A
  6% (4)
• B
  2% (1)
• C
  83% (52)
• D
  10% (6)

Explanation

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon- rds-for-postgresql-db-instance.html When the new, encrypted copy of the DB instance becomes available, you can point your applications to the new database. However, if your project doesn't allow for significant downtime for this activity, you need an alternate approach that helps minimize the downtime. This pattern uses the AWS Database Migration Service (AWS DMS) to migrate and continuously replicate the data so that the cutover to the new, encrypted database can be done with minimal downtime.

No community discussion yet for this question.