AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 303

Question

A company’s network security policy requires encryption for all data in transit. The company must encrypt data that is sent between Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes. Which solution will meet this requirement?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure Amazon EBS to enable volume encryption with AWS Key Management Service (AWS KMS) for data at rest. Amazon EBS provides block storage attached to a single EC2 instance. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 303