A Company Needs Its Amazon Elastic Block Store (Amazon EBS)

question 94

Multiple Choice

A company needs its Amazon Elastic Block Store (Amazon EBS) volumes to be encrypted at all times. During a security incident, EBS snapshots of suspicious instances are shared to a forensics account for analysis. A security engineer attempting to share a suspicious EBS snapshot to the forensics account receives the following error: "Unable to share snapshot. An error occurred (OperationNotPermitted) when calling the ModifySnapshotAttribute operation: Encrypted snapshots with EBS default key cannot be shared" Which combination of steps should the security engineer take in the incident account to complete the sharing operation? (Choose three.)

• A) Create a customer managed CMK. Copy the EBS snapshot encrypting the destination snapshot using the new CMK.
• B) Allow forensics accounting principals to use the CMK by modifying its policy.
• C) Create an Amazon EC2 instance. Attach the encrypted and suspicious EBS volume. Copy data from the suspicious volume to an unencrypted volume. Snapshot the unencrypted volume.
• D) Copy the EBS snapshot to the new decrypted snapshot.
• E) Restore a volume from the suspicious EBS snapshot. Create an unencrypted EBS volume of the same size.
• F) Share the target EBS snapshot with the forensics account.

---

Definitions:

Fracture

A break in the continuity of a bone, often caused by trauma, impact, stress, or disease.

Basketball

A team sport in which two teams, most commonly of five players each, opposing one another on a rectangular court, compete with the primary objective of shooting a basketball through the defender's hoop.

Ortolani Sign

A clinical sign used to detect hip dislocation or dysplasia in infants by assessing if the hip can be relocated into the socket.