Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance.
Which of these options would allow you to encrypt your data at rest? (Choose three.)
To encrypt data at rest on an EBS data volume, attached to an EC2 instance, you have several options. First, you can implement third-party volume encryption tools to encrypt your data. Second, you can encrypt data inside your applications before storing it on the EBS volume, ensuring that the data is encrypted before it even reaches the storage medium. Lastly, you can use native data encryption drivers at the file system level to encrypt the data as it is written to and read from the EBS volume. Implementing SSL/TLS is not suitable for data at rest as it is meant for encrypting data in transit, and EBS volumes are not encrypted by default.
Which of the following choices enables you to encrypt your data in transit? Why is SSL wrong?
The question mentions "possible options for protecting data while storing it at rest" SSL/TLS is used for encrrypting data in transite
SSL/TLS encrypts data in transit and not in rest.
You all have completely misread the question .. it is not a trick question. "You're weighing your choices for data protection while it's stored at rest on an EBS data disk" So besides the questions literally asking plainly how you can encrypt data in transit.. The scenario is saying that the data is sitting in the EBS data disk waiting to be moved, and the data will need to be encrypted in transit.
Encrypting the volume DOES NOT provide encryption in transit..
A, C and D. Trick question which i fell for. the question is asking about EBS volume encryption not for data in transit.
I believe, Data in transit means from EC2 level application to EBS volumes which is internal. Hence, SSL/TLS is not the solution. Thus, ACD seems correct options here. 3rd party encryption, File level encryption, and added already encrypted data.
bcd is incorrect.
No need SSL/TLS
Correct: A, C, D Incorrect: B - TLS is for transit encryption, not encryption at rest E - EBS does not automatically encrypt
BCD is incorrect
ACD is correct answer
B and E are wrong
SSL is Transport Protocol and the question is Data at rest
ACD is correct
ACD is correct
The correct answer to this question is definitely ACD.
A, C, D is correct
NO Fight . the correct options are A, C, and D.
ACD is Valid ( ACD, ACD, ACD )