DBS-C01 · Question #351
A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic…
The correct answer is B. Download the SSL .pem public key for Amazon DocumentDAdd the key to the application C. Create a snapshot of the unencrypted cluster. Restore the unencrypted snapshot as a new. https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html https://docs.aws.amazon.com/documentdb/latest/developerguide/encryption-at-rest.html
Question
A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic between the application and Amazon DocumentDB is not encrypted and that the DocumentDB cluster is not encrypted at rest. A database specialist must correct these issues and ensure that the data in transit and the data at rest are encrypted. Which actions should the database specialist take to meet these requirements? (Choose two.)
Options
- ADownload the SSH RSA public key for Amazon DocumentDB. Update the application
- BDownload the SSL .pem public key for Amazon DocumentDAdd the key to the application
- CCreate a snapshot of the unencrypted cluster. Restore the unencrypted snapshot as a new
- DCreate an Amazon DocumentDB VPC endpoint to prevent the traffic from going to the Amazon
- EActivate encryption at rest using the modify-db-cluster command with the --storage-encrypted
How the community answered
(67 responses)- A3% (2)
- B76% (51)
- D15% (10)
- E6% (4)
Explanation
https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html https://docs.aws.amazon.com/documentdb/latest/developerguide/encryption-at-rest.html
Topics
Community Discussion
No community discussion yet for this question.