How can this be resolved?

An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba4Kc. and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted

How can this be resolved?
A . Enable encryption on each host’s connection to the Amazon EFS volume Each connection must be recreated for encryption to take effect
B . Enable encryption on the existing EFS volume by using the AWS Command Line Interface
C . Enable encryption on each host’s local drive Restart each host to encrypt the drive
D . Enable encryption on a newly created volume and copy all data from the original volume Reconnect each host to the new volume

View Answer

Answer: D

Explanation:

https://docs.aws.amazon.com/efs/latest/ug/encryption.html

Amazon EFS supports two forms of encryption for file systems, encryption of data in transit and encryption at rest. You can enable encryption of data at rest when creating an Amazon EFS file system. You can enable encryption of data in transit when you mount the file system.