A healthcare company uses an Amazon EMR cluster to process patient data. The data must be encrypted in transit and at rest. Local volumes in the cluster also need to be encrypted. Which solution…

The correct answer is B. Create an EMR security configuration that encrypts the data and the volumes as required. Amazon EMR allows the creation of security configurations to specify settings for encrypting data at rest, data in transit, or both. These configurations can be applied to clusters to ensure that data stored in Amazon S3, local disks, and data moving between nodes is encrypted…

Submitted by javi_es· Mar 4, 2026Design Secure Architectures

Question

A healthcare company uses an Amazon EMR cluster to process patient data. The data must be encrypted in transit and at rest. Local volumes in the cluster also need to be encrypted. Which solution will meet these requirements?

Options

ACreate Amazon EBS volumes. Enable encryption. Attach the volumes to the existing EMR
BCreate an EMR security configuration that encrypts the data and the volumes as required.
CCreate an EC2 instance profile for the EMR instances. Configure the instance profile to enforce
DCreate a runtime role that has a trust policy for the EMR cluster.

How the community answered

(29 responses)

A
3% (1)
B
79% (23)
C
7% (2)
D
10% (3)

Explanation

Amazon EMR allows the creation of security configurations to specify settings for encrypting data at rest, data in transit, or both. These configurations can be applied to clusters to ensure that data stored in Amazon S3, local disks, and data moving between nodes is encrypted. By creating and applying an EMR security configuration, the company can ensure that all data processing complies with encryption requirements for sensitive patient data.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice