A company is utilizing an extensive array of EBS volumes to support their fleet of Amazon EC2 instances. As an AWS Certified Developer Associate, you have been approached to provide insights into the security features associated with EBS volumes. It is important to note that the company prefers not to create or maintain their own encryption key management system.

Can you assist them in identifying which options are applicable for Amazon EBS encryption? (Select two)

Exam-Like

Encryption by default is a Region-specific setting. If you enable it for a Region, you cannot disable it for individual volumes or snapshots in that Region

16.7%

Encryption by default is an AZ specific setting. If you enable it for an AZ, you cannot disable it for individual volumes or snapshots in that AZ

8.3%

You can encrypt an existing unencrypted volume or snapshot by using AWS Key Management Service (KMS) AWS SDKs

12.5%

A volume restored from an encrypted snapshot, or a copy of an encrypted snapshot is always encrypted

50.0%

A snapshot of an encrypted volume can be encrypted or unencrypted

12.5%

AWS Certified Developer - Associate

Get started today

Comments