SCS-C02 · Question #75
A company released a new software-as-a-service (SaaS) application that is receiving significant adoption by end users. The rds-storage-encrypted AWS Config managed rule generates an alert that notifie
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #75. The question stem and answer options stay visible for context.
Question
A company released a new software-as-a-service (SaaS) application that is receiving significant adoption by end users. The rds-storage-encrypted AWS Config managed rule generates an alert that notifies the company's security team about a resource that is not compliant. The noncompliant resource is an Amazon RDS for MySQL database that was deployed as part of the newly released application. How can the security team resolve the noncompliance with the LEAST disruption of application availability for the end users?
Options
- AUse AWS Database Migration Service (AWS DMS) with full load and change data capture (CDC)
- BCreate a snapshot of the noncompliant DB instance. Make a copy of the snapshot in the same
- CDeploy a patch to the application to stop writing to the noncompliant database. Enable storage
- DAdd a read replica to the noncompliant DB instance. Enable storage encryption on the read
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.