SCS-C02 · Question #336
You company has mandated that all data in AWS be encrypted at rest. How can you achieve this for EBS volumes? Choose 2 answers from the options given below
The correct answer is A. Use Windows bit locker for EBS volumes on Windows instances B. Use TrueEncrypt for EBS volumes on Linux instances. EBS encryption can also be enabled when the volume is created and not for existing volumes. One can use existing tools for OS level encryption. Option C is incorrect. AWS Systems Manager is a management service that helps you automatically collect software inventory, apply OS pat
Question
You company has mandated that all data in AWS be encrypted at rest. How can you achieve this for EBS volumes? Choose 2 answers from the options given below
Options
- AUse Windows bit locker for EBS volumes on Windows instances
- BUse TrueEncrypt for EBS volumes on Linux instances
- CUse AWS Systems Manager to encrypt the existing EBS volumes
- DBoot EBS volume can be encrypted during launch without using custom AMI
How the community answered
(20 responses)- A75% (15)
- C15% (3)
- D10% (2)
Explanation
EBS encryption can also be enabled when the volume is created and not for existing volumes. One can use existing tools for OS level encryption. Option C is incorrect. AWS Systems Manager is a management service that helps you automatically collect software inventory, apply OS patches, create system images, and configure Windows and Linux operating Option D is incorrect You cannot choose to encrypt a non-encrypted boot volume on instance launch. To have encrypted boot volumes during launch , your custom AMI must have it's boot volume encrypted
Topics
Community Discussion
No community discussion yet for this question.