AWS Certified Solutions Architect Associate · Free Practice Question Medium
Question 11
A company is building a new web-based customer relationship management application. The application will use several Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS) volumes behind an Application Load Balancer (ALB). The application will also use an Amazon Aurora database. All data for the application must be encrypted at rest and in transit. Which solution will meet these requirements?
- A Use BitLocker to encrypt all data at rest. Import the company’s TLS certificate keys to AWS Key Management Service (AWS KMS) Attach the KMS keys to the ALB to encrypt data in transit.
- B Use AWS Key Management Service (AWS KMS) to encrypt the EBS volumes and Aurora database storage at rest. Attach an AWS Certificate Manager (ACM) certificate to the ALB to encrypt data in transit.
- C Use AWS Key Management Service (AWS KMS) certificates on the ALB to encrypt data in transit. Use AWS Certificate Manager (ACM) to encrypt the EBS volumes and Aurora database storage at rest.
- D Use the AWS root account to log in to the AWS Management Console. Upload the company’s encryption certificates. While in the root account, select the option to turn on encryption for all data at rest and in transit for the account.
Reveal correct answer
Correct answer: B
Explanation
To meet the requirements of encrypting data at rest and in transit for a web-based customer relationship management application using Amazon EC2 instances, Amazon EBS volumes, an Application Load Balancer (ALB), and an Amazon Aurora database, the correct solution is to use AWS Key Management Service (AWS KMS) to encrypt the EBS volumes and Aurora database storage at rest. Additionally, attach an AWS Certificate Manager (ACM) certificate to the ALB to encrypt data in transit.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
