A SysOps Administrator Wants to Encrypt an Existing Amazon RDS

question 51

Multiple Choice

A SysOps administrator wants to encrypt an existing Amazon RDS DB instance with AWS Key Management Service (AWS KMS) . How should the SysOps administrator accomplish this goal?

• A) Copy the data volumes of the unencrypted instance. Apply the KMS key to the copied data volumes. Start the instance with the encrypted volumes.
• B) Create a read replica of the unencrypted instance. Encrypt the read replica with the KMS key. Promote the read replica to become the primary instance.
• C) Take a snapshot of the unencrypted instance. Apply the KMS key to the existing instance using the modify-db-instance command. Restart the instance.
• D) Take a snapshot of the unencrypted instance. Create an encrypted copy of the snapshot with the KMS key. Restore the instance from the encrypted snapshot.

---

Definitions:

Domestic Setting

Environments or scenes relating to the home or household activities.

Canon Of Representation

Established norms or standards in art and literature that dictate how subjects are depicted, often based on cultural, religious, or social values.

Frescoes

A method of mural painting executed upon freshly laid lime plaster, allowing the paint to become an integral part of the wall.

Tomb Of Nebamun

An ancient Egyptian tomb famous for its wall paintings that depict Nebamun, an 18th Dynasty nobleman, enjoying his life and afterlife.