DVA-C02 · Question #3
A developer wants to expand an application to run in multiple AWS Regions. The developer wants to copy Amazon Machine Images (AMIs) with the latest changes and create a new application stack in the…
The correct answer is A. Create new AMIs, and specify encryption parameters. Copy the encrypted AMIs to the destination. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIEncryption.html Encrypt an unencrypted image during copy In this scenario, an AMI backed by an unencrypted root snapshot is copied to an AMI with an encrypted root snapshot. The CopyImage action is invoked with two…
Question
A developer wants to expand an application to run in multiple AWS Regions. The developer wants to copy Amazon Machine Images (AMIs) with the latest changes and create a new application stack in the destination Region. According to company requirements, all AMIs must be encrypted in all Regions. However, not all the AMIs that the company uses are encrypted. How can the developer expand the application to run in the destination Region while meeting the encryption requirement?
Options
- ACreate new AMIs, and specify encryption parameters. Copy the encrypted AMIs to the destination
- BUse AWS Key Management Service (AWS KMS) to enable encryption on the unencrypted AMIs.
- CUse AWS Certificate Manager (ACM) to enable encryption on the unencrypted AMIs. Copy the
- DCopy the unencrypted AMIs to the destination Region. Enable encryption by default in the
How the community answered
(33 responses)- A85% (28)
- B3% (1)
- C9% (3)
- D3% (1)
Explanation
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIEncryption.html Encrypt an unencrypted image during copy In this scenario, an AMI backed by an unencrypted root snapshot is copied to an AMI with an encrypted root snapshot. The CopyImage action is invoked with two encryption parameters, including a customer managed key.
Community Discussion
No community discussion yet for this question.