nerdexam
Amazon

SOA-C02 · Question #112

A SysOps administrator is building a process for sharing Amazon RDS database snapshots between different accounts associated with different business units within the same company. All data must be…

The correct answer is B. Update the key policy to grant permission to the AWS KMS encryption key used to encrypt the. https://aws.amazon.com/premiumsupport/knowledge-center/share-encrypted-rds-snapshot-kms-

Submitted by anjalisingh· Mar 30, 2026Security and Compliance

Question

A SysOps administrator is building a process for sharing Amazon RDS database snapshots between different accounts associated with different business units within the same company. All data must be encrypted at rest. How should the administrator implement this process?

Options

  • AWrite a script to download the encrypted snapshot, decrypt it using the AWS KMS encryption
  • BUpdate the key policy to grant permission to the AWS KMS encryption key used to encrypt the
  • CCreate an Amazon EC2 instance based on the snapshot, then save the instance's Amazon
  • DCreate a new unencrypted RDS instance from the encrypted snapshot, connect to the

How the community answered

(45 responses)
  • A
    13% (6)
  • B
    76% (34)
  • C
    7% (3)
  • D
    4% (2)

Explanation

https://aws.amazon.com/premiumsupport/knowledge-center/share-encrypted-rds-snapshot-kms-

Topics

#RDS snapshot sharing#KMS key policy#cross-account encryption#encryption at rest

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice