A company is running a highly sensitive application on Amazon EC2 backed by an Amazon RDS database Compliance regulations mandate that all personally identifiable information (Pll) be encrypted at…

Question

Options

• ADeploy AWS Certificate Manager to generate certificates Use the certificates to encrypt the
• BDeploy AWS CloudHSM. generate encryption keys, and use the keys to encrypt database
• CConfigure SSL encryption using AWS Key Management Service {AWS KMS) keys to encrypt
• DConfigure Amazon Elastic Block Store (Amazon EBS) encryption and Amazon RDS encryption

• A
  4% (1)
• B
  12% (3)
• C
  8% (2)
• D
  76% (19)

Explanation

Default EBS Encryption: Can be enabled for new EBS volumes. Use of AWS KMS: Specify AWS KMS keys to handle encryption and decryption of data transparently. Amazon RDS Encryption: RDS Encryption: Encrypts the underlying storage for RDS instances using AWS KMS. Configuration: Enable encryption when creating the RDS instance or modify an existing instance to enable encryption. Least Amount of Changes: Both EBS and RDS support seamless encryption with AWS KMS, requiring minimal changes to the existing infrastructure. Enables compliance with regulatory requirements without modifying the application. Operational Efficiency: Using AWS KMS for both EBS and RDS ensures a consistent, managed approach to encryption, simplifying key management and enhancing security.

No community discussion yet for this question.