SCS-C02 · Question #227
A company's network security policy requires encryption for all data in transit. The company must encrypt data that is sent between Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS)…
The correct answer is B. Configure Amazon EBS to enable volume encryption with AWS Key Management Service (AWS. While this option specifically addresses data encryption at rest, it ensures that data stored on Amazon EBS volumes is encrypted using AWS KMS. This is important for meeting the company's network security policy for encryption of data. For data in transit between EC2 instances…
Question
A company's network security policy requires encryption for all data in transit. The company must encrypt data that is sent between Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes. Which solution will meet these requirements?
Options
- AConfigure Amazon EC2 to enable encryption in the EC2 network interface properties.
- BConfigure Amazon EBS to enable volume encryption with AWS Key Management Service (AWS
- CConfigure Amazon EBS to enable TLS encryption in the volume configuration properties.
- DConfigure Amazon EC2 to enable TLS encryption with certificates that are stored in AWS
How the community answered
(27 responses)- B81% (22)
- C7% (2)
- D11% (3)
Explanation
While this option specifically addresses data encryption at rest, it ensures that data stored on Amazon EBS volumes is encrypted using AWS KMS. This is important for meeting the company's network security policy for encryption of data. For data in transit between EC2 instances and EBS volumes, Amazon EBS uses the transport layer security (TLS) protocol internally for communication. This means data is automatically encrypted in transit without the need for further configuration on the EC2 or EBS side.
Topics
Community Discussion
No community discussion yet for this question.