Exam AWS Certified Database - Specialty topic 1 question 207 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 207
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A finance company migrated its 3 ׀¢׀’ on-premises PostgreSQL database to an Amazon Aurora PostgreSQL DB cluster. During a review after the migration, a database specialist discovers that the database is not encrypted at rest. The database must be encrypted at rest as soon as possible to meet security requirements. The database specialist must enable encryption for the DB cluster with minimal downtime.
Which solution will meet these requirements?

A. Modify the unencrypted DB cluster using the AWS Management Console. Enable encryption and choose to apply the change immediately.
B. Take a snapshot of the unencrypted DB cluster and restore it to a new DB cluster with encryption enabled. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.
C. Create an encrypted Aurora Replica of the unencrypted DB cluster. Promote the Aurora Replica as the new master.
D. Create a new DB cluster with encryption enabled and use the pg_dump and pg_restore utilities to load data to the new DB cluster. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.

Show Suggested Answer

Suggested Answer: B 🗳️

by mbar94 at Sept. 5, 2022, 6:13 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

missipssamarsh

11 months, 1 week ago

Selected Answer: B

it's B

upvoted 2 times

...

dougporto1988

1 year, 8 months ago

Selected Answer: B

I'll go with B https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Overview.Encryption.html#:~:text=You%20can%27t%20convert%20an%20unencrypted%20DB%20cluster%20to%20an%20encrypted%20one.%20However%2C%20you%20can%20restore%20an%20unencrypted%20snapshot%20to%20an%20encrypted%20Aurora%20DB%20cluster.%20To%20do%20this%2C%20specify%20a%20KMS%20key%20when%20you%20restore%20from%20the%20unencrypted%20snapshot.

upvoted 4 times

...