SAA-C03 · Question #671
A solutions architect needs to encrypt the storage for an Amazon EMR cluster that processes data for a company's monthly financial report. The EMR cluster uses a security configuration template. The…
The correct answer is B. Create a new security configuration to enable encryption for the local disks. Create a new cluster. Amazon EMR security configurations are immutable - they cannot be modified after creation, and changes do not apply to running clusters. To encrypt local (ephemeral) disks, you must create a new security configuration that enables local disk encryption and then launch a new EMR…
Question
A solutions architect needs to encrypt the storage for an Amazon EMR cluster that processes data for a company’s monthly financial report. The EMR cluster uses a security configuration template. The local disks of the EMR cluster are not encrypted. What should the solutions architect do to encrypt the local disks?
Options
- AUpdate the existing security configuration to enable encryption for the local disks. Restart the
- BCreate a new security configuration to enable encryption for the local disks. Create a new cluster
- CCreate a new security configuration to enable encryption for the local disks. Restart the existing
- DUpdate the existing security configuration to enable encryption for the local disks. Create a new
How the community answered
(53 responses)- A2% (1)
- B83% (44)
- C9% (5)
- D6% (3)
Explanation
Amazon EMR security configurations are immutable - they cannot be modified after creation, and changes do not apply to running clusters. To encrypt local (ephemeral) disks, you must create a new security configuration that enables local disk encryption and then launch a new EMR cluster using that configuration. This ensures all data stored on the cluster’s local storage is encrypted during processing.
Community Discussion
No community discussion yet for this question.