nerdexam
Amazon

DBS-C01 · Question #286

A company recently launched a mobile app that has grown in popularity during the last week. The company started development in the cloud and did not initially follow security best practices during dev

The correct answer is A. Create a manual backup of the existing Redis replication group by using the create-snapshot B. Use the --transit-encryption-enabled parameter on the new Redis replication group E. Use the --at-rest-encryption-enabled parameter on the new Redis replication group. TLS and Encryption at rest cannot be configured on existing cluster. Snapshot CLI command - create-snapshot Restore snapshot to a new cluster :- create-cache-cluster or create-replication-group

Submitted by tunde_lagos· Mar 6, 2026Database Security

Question

A company recently launched a mobile app that has grown in popularity during the last week. The company started development in the cloud and did not initially follow security best practices during development of the mobile app. The mobile app gives customers the ability to use the platform anonymously. Platform architects use Amazon ElastiCache for Redis in a VPC to manage session affinity (sticky sessions) and cookies for customers. The company's security team now mandates encryption in transit and encryption at rest for all traffic. A database specialist is using the AWS CLI to comply with this mandate. Which combination of steps should the database specialist take to meet these requirements? (Choose three.)

Options

  • ACreate a manual backup of the existing Redis replication group by using the create-snapshot
  • BUse the --transit-encryption-enabled parameter on the new Redis replication group
  • CUse the --at-rest-encryption-enabled parameter on the existing Redis replication group
  • DUse the --transit-encryption-enabled parameter on the existing Redis replication group
  • EUse the --at-rest-encryption-enabled parameter on the new Redis replication group
  • FCreate a manual backup of the existing Redis replication group by using the

How the community answered

(39 responses)
  • A
    54% (21)
  • C
    15% (6)
  • D
    5% (2)
  • F
    26% (10)

Explanation

TLS and Encryption at rest cannot be configured on existing cluster. Snapshot CLI command - create-snapshot Restore snapshot to a new cluster :- create-cache-cluster or create-replication-group

Topics

#ElastiCache Redis#encryption at rest#encryption in transit#security hardening

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DBS-C01 Practice