DVA-C02 Question 27

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A : Correct — When creating new AMIs or copying AMIs, you can specify encryption parameters during the copy process. This converts unencrypted AMIs to encrypted ones. Copying encrypted AMIs to destination region maintains encryption. Clean and compliant solution.

• Chose A1

  You cannot encrypt an existing unencrypted AMI in place. The correct approach is to create new encrypted copies of the unencrypted AMIs (by specifying encryption parameters during the copy), then copy those encrypted AMIs to the destination Region.

• Chose A4

  A) Amazon Machine Images (AMIs) can be encrypted at creation time B) Eliminated - AWS KMS does not allow you to encrypt an existing unencrypted AMI directly. C) Eliminated - AWS Certificate Manager (ACM) is used for managing SSL/TLS certificates, not for encrypting AMIs. D) Eliminated - It does not retroactively encrypt existing AMIs.