AmazonAmazon
SOA-C02 · Question #297
SOA-C02 Question #297: Real Exam Question with Answer & Explanation
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #297. The question stem and answer options stay visible for context.
Submitted by yasin.bd· Mar 30, 2026Security and Compliance
Question
A company needs to deploy a new workload on AWS. The company must encrypt all data at rest and must rotate the encryption keys once each year. The workload uses an Amazon RDS for MySQL Multi- AZ database for data storage. Which configuration approach will meet these requirements?
Options
- AEnable Transparent Data Encryption (TDE) in the MySQL configuration file.
- BEnable RDS encryption on the database at creation time by using the AWS managed key for
- CCreate a new AWS Key Management Service (AWS KMS) customer managed key.
- DCreate a new AWS Key Management Service (AWS KMS) customer managed key.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#AWS RDS#AWS KMS#Data Encryption#Key Rotation