SAP-C02 Exam - Question 517

Question

A company has deployed applications to thousands of Amazon EC2 instances in an AWS account. A security audit discovers that several unencrypted Amazon Elastic Block Store (Amazon EBS) volumes are attached to the EC2 instances. The company’s security policy requires the EBS volumes to be encrypted.

The company needs to implement an automated solution to encrypt the EBS volumes. The solution also must prevent development teams from creating unencrypted EBS volumes.

Which solution will meet these requirements?

Examice · Accepted Answer

The correct approach involves using the AWS Config managed rule to identify unencrypted EBS volumes, as it continually monitors and assesses compliance with desired configurations. Enabling automatic remediation and associating an AWS Systems Manager Automation runbook ensures that any unencrypted volumes found are promptly encrypted. By modifying the AWS account setting for EBS encryption to default to encryption, it prevents future creation of unencrypted EBS volumes. This solution meets both the identification and prevention requirements.

awsaz · Answer

the answer is D

kupo777 · Answer

D
Enabling default encryption for EBSs prevents the creation of unencrypted EBSs.

Helpnosense · Answer

Use config to find unencrypted EBS. Change the default setting.

vip2 · Answer

D is correct instead of A  because AWS support change account setting for EBS encryption

SAP-C02 Exam - Question 517

Discussion