A Company Has an Application That Uses an Amazon RDS

question 226

Multiple Choice

A company has an application that uses an Amazon RDS PostgreSQL database. The company is developing an application feature that will store sensitive information for an individual in the database. During a security review of the environment, the company discovers that the RDS DB instance is not encrypting data at rest. The company needs a solution that will provide encryption at rest for all the existing data and for any new data that is entered for an individual. Which combination of options can the company use to meet these requirements? (Choose two.)

• A) Create a snapshot of the DB instance. Copy the snapshot to a new snapshot, and enable encryption for the copy process. Use the new snapshot to restore the DB instance.
• B) Modify the configuration of the DB instance by enabling encryption. Create a snapshot of the DB instance. Use the snapshot to restore the DB instance.
• C) Use AWS Key Management Service (AWS KMS) to create a new default AWS managed aws/rds key. Select this key as the encryption key for operations with Amazon RDS.
• D) Use AWS Key Management Service (AWS KMS) to create a new CMK. Select this key as the encryption key for operations with Amazon RDS.
• E) Create a snapshot of the DB instance. Enable encryption on the snapshot. Use the snapshot to restore the DB instance.

---

Definitions:

MIS Department

Refers to the Management Information Systems Department, a unit within an organization responsible for developing and managing technology solutions that facilitate business operations.

Mobile Subscriptions

Regular payment plans that allow users access to mobile phone services, including data, voice, and messaging.

Batches

Groups of items, tasks, or data processed or treated together as a set in manufacturing or information technology contexts.

Data

Information, often in the form of facts or statistics, collected together for reference or analysis.