A Company Is Running an Amazon RDS for MySQL Multi-AZ

question 9

Multiple Choice

A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload. RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical applications must encrypt data at rest. The company has asked its database specialist to formulate a plan to accomplish this for the DB instance. Which process should the database specialist recommend?

• A) Create an encrypted snapshot of the unencrypted DB instance. Copy the encrypted snapshot to Amazon S3. Restore the DB instance from the encrypted snapshot using Amazon S3.
• B) Create a new RDS for MySQL DB instance with encryption enabled. Restore the unencrypted snapshot to this DB instance.
• C) Create a snapshot of the unencrypted DB instance. Create an encrypted copy of the snapshot. Restore the DB instance from the encrypted snapshot.
• D) Temporarily shut down the unencrypted DB instance. Enable AWS KMS encryption in the AWS Management Console using an AWS managed CMK. Restart the DB instance in an encrypted state.

---

Definitions:

Client

A person or organization availing the services or advice of a professional or company.

Professional

Pertaining to someone who engages in a particular occupation for payment, often requiring specialized education and training.

Anecdotal Record

A narrative account of a specific incident or event concerning an individual's behavior, often used in educational or psychological contexts to gather qualitative data.

Personnel File

A collection of records kept by an employer that contains information related to an employee’s personal and employment history.