Your application stores sensitive information on an EBS volume attached to your EC2 instance. How can you protect your information? (Choose two.)
A) Unmount the EBS volume, take a snapshot and encrypt the snapshot. Re-mount the Amazon EBS volume.
B) It is not possible to encrypt an EBS volume, you must use a lifecycle policy to transfer data to S3 for encryption.
C) Copy the unencrypted snapshot and check the box to encrypt the new snapshot. Volumes restored from this encrypted snapshot will also be encrypted.
D) Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume.

Question

Quizplus · Accepted Answer

Encrypting a snapshot and creating a new encrypted volume from it, or creating a new encrypted volume and transferring data to it, are both valid methods to protect sensitive information on EBS volumes.

Your Application Stores Sensitive Information on an EBS Volume Attached