AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 121

Question

A company is running an online transaction processing (OLTP) workload on AWS. This workload uses an unencrypted Amazon RDS DB instance in a Multi-AZ deployment. Daily database snapshots are taken from this instance. What should a solutions architect do to ensure the database and snapshots are always encrypted moving forward?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Encrypt a copy of the latest DB snapshot. Replace existing DB instance by restoring the encrypted snapshot. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 121