DBS-C01 · Question #354
A database specialist needs to replace the encryption key for an Amazon RDS DB instance. The database specialist needs to take immediate action to ensure security of the database. Which solution…
The correct answer is C. Create a manual snapshot of the DB instance. Create an encrypted copy of the snapshot by. You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created. However, you can add encryption to an unencrypted DB instance by creating a snapshot of your DB instance, and then creating an encrypted copy of that snapshot…
Question
A database specialist needs to replace the encryption key for an Amazon RDS DB instance. The database specialist needs to take immediate action to ensure security of the database. Which solution will meet these requirements?
Options
- AModify the DB instance to update the encryption key. Perform this update immediately without
- BExport the database to an Amazon S3 bucket. Import the data to an existing DB instance by using
- CCreate a manual snapshot of the DB instance. Create an encrypted copy of the snapshot by
- DCreate a manual snapshot of the DB instance. Restore the snapshot to a new DB instance.
How the community answered
(23 responses)- A17% (4)
- B4% (1)
- C70% (16)
- D9% (2)
Explanation
You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created. However, you can add encryption to an unencrypted DB instance by creating a snapshot of your DB instance, and then creating an encrypted copy of that snapshot. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon- rds-for-postgresql-db-instance.html
Topics
Community Discussion
No community discussion yet for this question.