Answer-first summary for fast verification
Answer: By creating a key in AWS KMS and enabling DB instance encryption.
The correct option is A. AWS Key Management Service (AWS KMS) allows you to create and manage encryption keys. Enabling encryption for RDS DB instances using AWS KMS ensures that your data at rest is securely encrypted. While options C and D discuss enabling SSL/TLS, these methods are used for encrypting data in transit, not data at rest. Option B involves using AWS Secrets Manager, which is not the appropriate service for managing data encryption keys in this scenario.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
How should a solutions architect ensure data at rest encryption for a company's Amazon RDS DB instances?
A
By creating a key in AWS KMS and enabling DB instance encryption.
B
By creating an encryption key, storing it in AWS Secrets Manager, and encrypting DB instances with it.
C
By generating an ACM certificate and enabling SSL/TLS for DB instances.
D
By generating an IAM certificate and enabling SSL/TLS for DB instances.
No comments yet.