Practice Test 2 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test

A customer wants to create EBS Volumes in AWS. The data on the volume is required to be encrypted at rest. How could this be achieved?

A. Create an SSL Certificate and attach it to the EBS Volume.

B. Use KMS to generate encryption keys which can be used to encrypt the volume.

C. Use CloudFront in front of the EBS Volume to encrypt all requests.

D. Use EBS Snapshots to encrypt the requests.

Correct Answer – B

When you create a volume, you have an option to encrypt the volume using keys generated by the Key Management Service.

For more information on KMS, please refer to the following URL:

Option A is incorrect since SSL helps to encrypt data in transit.
Option C is incorrect because it also does not help in encrypting the data at rest.
Option D is incorrect because the snapshot of an unencrypted volume is also unencrypted.