Amazon Exam SAP-C02 Topic 11 Question 28 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 28
Topic #: 11

A company's compliance audit reveals that some Amazon Elastic Block Store (Amazon EBS) volumes that were created in an AWS account were not encrypted. A solutions architect must Implement a solution to encrypt all new EBS volumes at rest

Which solution will meet this requirement with the LEAST effort?

ACreate an Amazon EventBridge rule to detect the creation of unencrypted EBS volumes. Invoke an AWS Lambda function to delete noncompliant volumes.

BUse AWS Audit Manager with data encryption.

CCreate an AWS Config rule to detect the creation of a new EBS volume. Encrypt the volume by using AWS Systems Manager Automation.

DTurn in EBS encryption by default in all AWS Regions.

Show Suggested Answer

Suggested Answer: D

The most effortless way to ensure that all new Amazon Elastic Block Store (EBS) volumes are encrypted at rest is to enable EBS encryption by default in all AWS Regions. This setting automatically encrypts all new EBS volumes and snapshots created in the account, thereby ensuring compliance with encryption policies without the need for manual intervention or additional monitoring.

by Scarlet at Apr 24, 2024, 10:38 PM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brinda

1 days ago

But option C seems like a more automated approach.

upvoted 0 times

...

Christene

2 days ago

I think option A is the best solution.

upvoted 0 times

...

Anglea

15 days ago

What about using AWS Config rule to encrypt new EBS volumes using AWS Systems Manager Automation?

upvoted 0 times

...

17 days ago

I think the best solution is to create an Amazon EventBridge rule and invoke a Lambda function to delete noncompliant volumes.

upvoted 0 times

...