A user is trying to launch an EBS backed EC2 instance under free usage. The user wants to
achieve
encryption of the EBS volume. How can the user encrypt the data at rest?
A.
Use AWS EBS encryption to encrypt the data at rest
B.
The user cannot use EBS encryption and has to encrypt the data manually or using a third
party tool
C.
The user has to select the encryption enabled flag while launching the EC2 instance
D.
Encryption of volume is not available as a part of the free usage tier
Explanation:
AWS EBS supports encryption of the volume while creating new volumes. It supports encryption of
the data at rest, the I/O as well as all the snapshots of the EBS volume. The EBS supports
encryption for the selected instance type and the newer generation instances, such as m3, c3, cr1,
r3, g2. It is not supported with a micro instance.
A. use AWS EBS encryption. you can attach encrypted volume to micro instance also.
Instance types that support Amazon EBS encryption
General purpose
m3.medium | m3.large | m3.xlarge | m3.2xlarge | m4.large | m4.xlarge | m4.2xlarge | m4.4xlarge | m4.10xlarge | m4.16xlarge | t2.nano | t2.micro | t2.small | t2.medium | t2.large | t2.xlarge | t2.2xlarge
Compute optimized
c4.large | c4.xlarge | c4.2xlarge | c4.4xlarge | c4.8xlarge | c3.large | c3.xlarge | c3.2xlarge | c3.4xlarge | c3.8xlarge
Memory optimized
cr1.8xlarge | r3.large | r3.xlarge | r3.2xlarge | r3.4xlarge | r3.8xlarge | r4.large | r4.xlarge | r4.2xlarge | r4.4xlarge | r4.8xlarge | r4.16xlarge | x1.16xlarge | x1.32xlarge
Storage optimized
d2.xlarge | d2.2xlarge | d2.4xlarge | d2.8xlarge | i2.xlarge | i2.2xlarge | i2.4xlarge | i2.8xlarge
Accelerated computing
g2.2xlarge | g2.8xlarge | p2.xlarge | p2.8xlarge | p2.16xlarge
A
I am sorry answer is B becuase user has already launch the instance and now it wants to encrypt the EBS volume so we have to use third part software.
“A User is trying to……”, he is yet to launch Instance.
The answer is A. If AWS is trying to paint you into a corner through wording that deep, then they aren’t accomplishing their objective with this material. This is vendor specific technology, not Harvard Law School.
Answer is B according pass4sure.
Explanation:
AWS EBS supports encryption of the volume while creating new volumes. It supports encryption of the data at rest, the I/O as well as all the snapshots of the EBS volume. The EBS supports encryption for the selected instance type and the newer generation instances, such as m3, c3, cr1, r3, g2. It is not supported with a micro instance.
The EBS Encryption is supported on T2 family as well.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html