Which of the following services natively encrypts data at rest within an AWS region? Choose 2 answers
A.
AWS Storage Gateway
B.
Amazon DynamoDB
C.
Amazon CloudFront
D.
Amazon Glacier
E.
Amazon Simple Queue Service
Explanation:
https://media.amazonwebservices.com/AWS_Securing_Data_at_Rest_with_Encryption.pdf (page 12)
A D
https://d0.awsstatic.com/whitepapers/aws-securing-data-at-rest-with-encryption.pdf
…
You can also use a block level encryption tool (e.g. BitLocker or dmcrypt/LUKS) on the iSCSI endpoint that AWS Storage Gateway exposes to encrypt all data on the disk volume.
https://aws.amazon.com/glacier/details/
…
Amazon Glacier encrypts your data at rest by default and supports secure data transit with SSL
not B
https://forums.aws.amazon.com/thread.jspa?threadID=149353
A & D
AD
This was on the AWS Architect Exam 17/02/2018. Definitely AD