A user is planning to schedule a backup for an existing EBS volume. The user wants the backup to be created through snapshot, and for it to be encrypted. How can the user achieve data encryption with a snapshot?
A.
Encrypt the existing EBS volumes so that the snapshot will be encrypted by AWS when it is cre-ated
B.
By default the snapshot is encrypted by AWS
C.
While creating a snapshot select the snapshot with encryption
D.
Enable server side encryption for the snapshot using S3
Suggested Answer:A🗳️
AWS EBS supports encryption of the volume. It also supports creating volumes from existing snap-shots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of the encrypted EBS will also be encrypted. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
An existing unencrypted volume cannot be modified to be encrypted.
In order to get it encrypted you have to do the following:
1) Create a snapshot of that volume
2) Select the new snapshot and select "Copy" from the Action menu
3) Select the encryption option
4) The resultant copy will be the one encrypted
With that said, it looks like there is no clear and correct answer to this question. But as it is mandatory to pick one then I am forced to pick A.
To achieve data encryption with a snapshot, the user needs to encrypt the existing EBS volumes associated with the desired snapshot. When the user creates a snapshot of an encrypted EBS volume, AWS automatically encrypts the snapshot.
Ans A is not having proper description.
How Can encrypt the existing EBS volumes. ? It can be done while creating the new volumes from the snapshot taken for backup from the Non encrypted existing ebs volume.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CuLeBrO
Highly Voted 2 years, 5 months agoalbert_kuo
Most Recent 10 months, 1 week agogretch
2 years, 5 months agosen12
2 years, 6 months agokarmaah
2 years, 7 months agokarmaah
2 years, 6 months ago