A company maintains an application that uses an Amazon RDS DB instance for its database. A developer needs to implement encryption at rest for the database. Which combination of steps should the developer take to meet this requirement? (Choose two.)
A) Enable encryption on the DB instance in the AWS Management Console.
B) Stop the DB instance.
C) Restore the DB instance from the encrypted snapshot.
D) Take a snapshot of the DB instance, and create an encrypted copy of the snapshot.
E) Create a customer managed key in AWS Key Management Service (AWS KMS).

Question

Quizplus · Accepted Answer

To implement encryption at rest for an existing RDS DB instance, you need to take a snapshot of the instance, create an encrypted copy of that snapshot, and then restore the DB instance from the encrypted snapshot.

A Company Maintains an Application That Uses an Amazon RDS