What should a SysOps administrator do to encrypt the database?

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company’s new security policy requires all AWS resources to be

encrypted at rest and in transit.

What should a SysOps administrator do to encrypt the database?
A . Configure encryption on the existing DB instance.
B. Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.
C. Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.
D. Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy.

View Answer

Answer: B