CLF-C02 Question 230

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  Open the Amazon EC2 console at Select the Region from the navigation bar Select EC2 Dashboard from the navigation pane Choose Account Attributes, then Data protection and security in the upper-right corner In the EBS encryption section, choose Manage Select Enable for Always encrypt new EBS volumes Choose a default encryption key Select Update EBS encryption

• 1

  B. AWS customers

• Chose C2

  A. AWS Support - AWS Support does not directly enable encryption for EBS. They provide support and guidance, but the customer or AWS KMS is responsible for enabling encryption. B. AWS customers - AWS customers are responsible for enabling encryption for their EBS volumes, but they do so using AWS KMS. C. AWS Key Management Service (AWS KMS) - AWS KMS is the service that provides the encryption keys and enables encryption of data at rest for Amazon EBS. Customers can use AWS KMS to create, manage, and use cryptographic keys to protect their data. D. AWS Trusted Advisor - AWS Trusted Advisor is a service that provides recommendations to optimize your AWS environment, but it does not directly enable encryption for EBS volumes. So, the correct answer is option C. AWS Key Management Service (AWS KMS) enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS).