A Company Is Running an Amazon RDS for MySQL Multi-AZ

question 9

Multiple Choice

A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload. RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical applications must encrypt data at rest. The company has asked its database specialist to formulate a plan to accomplish this for the DB instance. Which process should the database specialist recommend?

• A) Create an encrypted snapshot of the unencrypted DB instance. Copy the encrypted snapshot to Amazon S3. Restore the DB instance from the encrypted snapshot using Amazon S3.
• B) Create a new RDS for MySQL DB instance with encryption enabled. Restore the unencrypted snapshot to this DB instance.
• C) Create a snapshot of the unencrypted DB instance. Create an encrypted copy of the snapshot. Restore the DB instance from the encrypted snapshot.
• D) Temporarily shut down the unencrypted DB instance. Enable AWS KMS encryption in the AWS Management Console using an AWS managed CMK. Restart the DB instance in an encrypted state.

---

Definitions:

Checking Accounts

Bank accounts that allow for both deposits and withdrawals, enabling easy access for daily transactions.

Government Bond

A debt security issued by a government to support government spending and obligations, offering a fixed rate of interest over a period of time.

Reserves

Funds or commodities set aside for future use or held as a buffer against unforeseen shortages or financial emergencies.

Discount Rate

The interest rate charged by central banks on loans to commercial banks, influencing monetary policy and liquidity.