Exam AWS Certified Solutions Architect - Professional topic 1 question 879 discussion

The question asks how to encrypt "new" volumes. I guess we are not worrying about the older stuff for now.

D is correct.

https://aws.amazon.com/premiumsupport/knowledge-center/ebs-automatic-encryption/

Agree with D for all New volumes

D is correct. The question is looking for the LEAST effort for encrypting "new" volumes. This is accomplished by turning on encryption by default, which will only allow encryption to be used unless it is turned off again. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#encryption-by-default If you want to correct current volumes, which the questions is not asking you to do, then you could follow-up with answer C as a solution (which requires a bit of configuration). Remember to only answer what the question is asking for and not try to solve things that it doesn't ask for.

New Amazon EBS volumes aren't encrypted by default. However, there is a setting in the EC2 console that turns on encryption by default for all new Amazon EBS volumes and snapshot copies created within a specified Region.

D is correct , Since the ask is to encrypt all new EBS volumes. Existing unencrypted Volumes will be handled separately..

D as per link

I will go with D as per the link already added

I think its C

D is right. https://aws.amazon.com/premiumsupport/knowledge-center/ebs-automatic-encryption/

It's C. Enabling encryption doesn't guarantee that ESB will be encrypted. You have to create a snapshot, create a new volume encrypted...