Free SAA-C03 Web TestEngine Demo

Q71 Multiple choice

A company has an application that uses an Amazon RDS for PostgreSQL database. The company is developing an application feature that will store sensitive information for an individual in the database.

During a security review of the environment, the company discovers that the RDS DB instance is not encrypting data at rest. The company needs a solution that will provide encryption at rest for all the existing data and for any new data that is entered for an individual.

Which combination of steps should the company take to meet these requirements? Select TWO.

Select all that apply.

A
Create a snapshot of the DB instance. Enable encryption on the snapshot. Use the encrypted snapshot to create a new DB instance. Adjust the application configuration to use the new DB instance.
B
Create a snapshot of the DB instance. Create an encrypted copy of the snapshot. Use the encrypted snapshot to create a new DB instance. Adjust the application configuration to use the new DB instance.
C
Modify the configuration of the DB instance by enabling encryption. Create a snapshot of the DB instance. Use the snapshot to create a new DB instance. Adjust the application configuration to use the new DB instance.
D
Use AWS KMS to create a new default AWS managed aws/rds key. Select this key as the encryption key for operations with Amazon RDS.
E
Use AWS KMS to create a new customer managed key. Select this key as the encryption key for operations with Amazon RDS.

SAA-C03 Web TestEngine demo