AWS Certified Solutions Architect – Associate (SAA-C02) — Question 224

A solutions architect needs to ensure that all Amazon Elastic Block Store (Amazon EBS) volumes restored from unencrypted EBC snapshots are encrypted.
What should the solutions architect do to accomplish this?

Answer options

• A. Enable EBS encryption by default for the AWS Region.
• B. Enable EBS encryption by default for the specific volumes.
• C. Create a new volume and specify the symmetric customer master key (CMK) to use for encryption.
• D. Create a new volume and specify the asymmetric customer master key (CMK) to use for encryption.

Correct answer: A

Explanation

The correct answer is A because enabling EBS encryption by default for the AWS Region ensures that all new EBS volumes created from unencrypted snapshots will be encrypted automatically. Options B, C, and D are incorrect because they do not provide a default encryption setting for all volumes in the region, which is necessary to enforce encryption on all restored volumes.