AWS Certified SysOps Administrator SOA-C01 – Question471

A user is planning to schedule a backup for an existing EBS volume. The user wants the backup to be created through snapshot, and for it to be encrypted. How can the user achieve data encryption with a snapshot?

A. Encrypt the existing EBS volumes so that the snapshot will be encrypted by AWS when it is cre-ated
B. By default the snapshot is encrypted by AWS
C. While creating a snapshot select the snapshot with encryption
D. Enable server side encryption for the snapshot using S3

Correct Answer: A

Explanation:

Explanation: AWS EBS supports encryption of the volume. It also supports creating volumes from existing snap-shots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of the encrypted EBS will also be encrypted. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard. Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html