DBS-C01 · Question #308
A company is using an Amazon Aurora PostgreSQL DB cluster for a project. A database specialist must ensure that the database is encrypted at rest. The database size is 500 GB. What is the FASTEST…
The correct answer is C. Take a manual snapshot of the unencrypted DB cluster. Restore the unencrypted snapshot to a. You can't convert an unencrypted DB cluster to an encrypted one. However, you can restore an unencrypted snapshot to an encrypted Aurora DB cluster. To do this, specify a KMS key when you restore from the unencrypted snapshot…
Question
A company is using an Amazon Aurora PostgreSQL DB cluster for a project. A database specialist must ensure that the database is encrypted at rest. The database size is 500 GB. What is the FASTEST way to secure the data through encryption at rest in the DB cluster?
Options
- ATake a manual snapshot of the unencrypted DB cluster. Create an encrypted copy of that
- BCreate an AWS Key Management Service (AWS KMS) key in the same AWS Region and create
- CTake a manual snapshot of the unencrypted DB cluster. Restore the unencrypted snapshot to a
- DCreate a new encrypted Aurora PostgreSQL DB cluster. Use AWS Database Migration Service
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C78% (18)
- D13% (3)
Explanation
You can't convert an unencrypted DB cluster to an encrypted one. However, you can restore an unencrypted snapshot to an encrypted Aurora DB cluster. To do this, specify a KMS key when you restore from the unencrypted snapshot. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Overview.Encryption.html
Topics
Community Discussion
No community discussion yet for this question.