An Amazon EC2 instance has a secondary Amazon Elastic Block Store (EBS) volume attached that contains sensitive data. A new company policy requires the secondary volume to be encrypted at rest. Which solution will meet this requirement?
A) Create a snapshot of the volume. Create a new volume from the snapshot with the Encrypted parameter set to true. Detach the original volume and attach the new volume to the instance.
B) Create an encrypted Amazon Machine Image (AMI) of the EC2 instance. Launch a new instance with the encrypted AMI. Terminate the original instance.
C) Stop the EC2 instance. Encrypt the volume with AWS CloudHSM. Start the instance and verify encryption.
D) Stop the EC2 instance. Modify the instance properties and set the Encrypted parameter to true. Start the instance and verify encryption.

Question

Quizplus · Accepted Answer

Create a snapshot of the volume, then create a new encrypted volume from that snapshot, and finally detach the original volume and attach the new encrypted volume to the instance. This process ensures the data is encrypted at rest.

An Amazon EC2 Instance Has a Secondary Amazon Elastic Block