SAA-C03 · Question #705
A company must ensure that all Amazon Elastic Block Store (Amazon EBS) volumes are encrypted. A recent security audit found multiple EBS volumes that were unencrypted. The company has over 100,000 EBS
The correct answer is D. Create an AWS Config rule for Amazon EBS to evaluate whether a volume is encrypted and to. AWS Config can continuously evaluate EBS volumes for compliance at scale by using a managed rule that checks whether volumes are encrypted. A periodic trigger lets the company assess all existing volumes (including the 100,000+ already deployed) and continue checking future volum
Question
A company must ensure that all Amazon Elastic Block Store (Amazon EBS) volumes are encrypted. A recent security audit found multiple EBS volumes that were unencrypted. The company has over 100,000 EBS volumes. The company wants to minimize the cost and operational effort required to check encryption on all existing and future EBS volumes. Which solution will meet these requirements?
Options
- ACall APIs to describe the EBS volumes and to confirm that the EBS volumes are encrypted. Use
- BCreate an Amazon EventBridge rule to monitor Amazon EBS createVolume events. Configure the
- CCreate an IAM policy that requires the use of tags on EBS volumes. Use AWS Cost Explorer to
- DCreate an AWS Config rule for Amazon EBS to evaluate whether a volume is encrypted and to
How the community answered
(17 responses)- B18% (3)
- C6% (1)
- D76% (13)
Explanation
AWS Config can continuously evaluate EBS volumes for compliance at scale by using a managed rule that checks whether volumes are encrypted. A periodic trigger lets the company assess all existing volumes (including the 100,000+ already deployed) and continue checking future volumes automatically, with minimal operational effort and without custom code.
Community Discussion
No community discussion yet for this question.