Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Nov 30, 2026.
Replacement: DVA-C03 Practice Exam
Question 27 of 167
Free Preview · 167 of 554 · questions 1–167 of 554 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A : Correct — When creating new AMIs or copying AMIs, you can specify encryption parameters during the copy process. This converts unencrypted AMIs to encrypted ones. Copying encrypted AMIs to destination region maintains encryption. Clean and compliant solution.
You cannot encrypt an existing unencrypted AMI in place. The correct approach is to create new encrypted copies of the unencrypted AMIs (by specifying encryption parameters during the copy), then copy those encrypted AMIs to the destination Region.
A) Amazon Machine Images (AMIs) can be encrypted at creation time B) Eliminated - AWS KMS does not allow you to encrypt an existing unencrypted AMI directly. C) Eliminated - AWS Certificate Manager (ACM) is used for managing SSL/TLS certificates, not for encrypting AMIs. D) Eliminated - It does not retroactively encrypt existing AMIs.