nerdexam
Amazon

SAA-C03 · Question #280

A company discovers that an Amazon DynamoDB Accelerator (DAX) cluster for the company's web application workload is not encrypting data at rest. The company needs to resolve thesecurity issue. Which…

The correct answer is B. Delete the existing DAX cluster. Recreate the DAX cluster, and configure the new cluster to. DAX does not support enabling encryption at rest on an existing cluster. To use encryption at rest, you must create a new DAX cluster with encryption enabled at creation time and migrate workloads accordingly.

Submitted by cyberguy42· Mar 4, 2026Design Secure Architectures

Question

A company discovers that an Amazon DynamoDB Accelerator (DAX) cluster for the company's web application workload is not encrypting data at rest. The company needs to resolve thesecurity issue. Which solution will meet this requirement?

Options

  • AStop the existing DAX cluster. Enable encryption at rest for the existing DAX cluster, and start the
  • BDelete the existing DAX cluster. Recreate the DAX cluster, and configure the new cluster to
  • CUpdate the configuration of the existing DAX cluster to encrypt the data at rest.
  • DIntegrate the existing DAX cluster with AWS Security Hub to automatically enable encryption at

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    94% (34)
  • D
    3% (1)

Explanation

DAX does not support enabling encryption at rest on an existing cluster. To use encryption at rest, you must create a new DAX cluster with encryption enabled at creation time and migrate workloads accordingly.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice