SAP-C02 Question 318

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  C only address existing unencrypted EBS, not preventing future unencrypted D is so clear "Proactively prevents the creation of unencrypted EBS volumes" The key word is all new EBS volume

• 1

  D The company requires that all new EBS volumes be encrypted at rest. Turning on EBS encryption by default for all regions will automatically encrypt any new EBS volume created, meeting the compliance requirement with minimal effort. This approach ensures that encryption is enabled for all new volumes without requiring additional configuration or automation.

• Chose C1

  there is no direct way to encrypt existing unencrypted EBS volumes or snapshots. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-encrypt-existing-and-new-amazon-ebs-volumes.html