COMPUTER SCIENCE AND ENGINEERING
CLOUD COMPUTING
|
Question
[CLICK ON ANY CHOICE TO KNOW THE RIGHT ANSWER]
|
|
|
EBS snapshots fully support EBS encryption.
|
|
|
EBS snapshots partially only support EBS encryption.
|
|
|
EBS snapshots doesn’t support Encryption
|
|
|
Encryption doesn’t applicable to EBS
|
Detailed explanation-1: -You cannot directly encrypt existing unencrypted volumes or snapshots. However, you can create encrypted volumes or snapshots from unencrypted volumes or snapshots. If you enable encryption by default, Amazon EBS automatically encrypts new volumes and snapshots using your default KMS key for EBS encryption.
Detailed explanation-2: -Amazon EBS encryption is supported by all volume types, and includes built-in key management infrastructure without having you to build, maintain, and secure your own keys. We use AWS Key Management Service (AWS KMS) envelope encryption with customer master keys (CMK) for your encrypted volumes and snapshots.
Detailed explanation-3: -A user is creating a snapshot of an EBS volume. Which of the below statements is incorrect in relation to the creation of an EBS snapshot? AZ. Hence the statement “It is stored in the same AZ as the volume” is incorrect.
Detailed explanation-4: -Amazon RDS snapshots are automatically encrypted with the same encryption key that was used to encrypt the source Amazon RDS database. Snapshots of unencrypted Amazon RDS databases are also unencrypted. AWS Backup currently supports all Amazon RDS database engines, including Amazon Aurora.