AWS Certified SysOps Administrator – Associate (legacy) — Question 106

A user is trying to launch an EBS backed EC2 instance under free usage. The user wants to achieve encryption of the EBS volume. How can the user encrypt the data at rest?

Answer options

• A. Use AWS EBS encryption to encrypt the data at rest
• B. The user cannot use EBS encryption and has to encrypt the data manually or using a third party tool
• C. The user has to select the encryption enabled flag while launching the EC2 instance
• D. Encryption of volume is not available as a part of the free usage tier

Correct answer: B

Explanation

The correct answer is B because EBS encryption is not supported under the free tier, requiring the user to resort to manual encryption methods or third-party tools. Option A is incorrect as EBS encryption cannot be utilized in this scenario. Option C is wrong since the encryption flag cannot be selected if EBS encryption is not available. Option D is misleading because it does not clearly state that encryption is not available for free tier users.