Q5 — AWS SAA-C03 Ch.10

Question 5 of 100 | ← Chapter 10

Q605. A company is migrating its workloads to AWS. The company has transactional and sensitive data in its databases. The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases.Which solution will meet these requirements?

Correct Answer: B. Migrate the databases to Amazon RDS Configure encryption at rest.

Explanation

the solution that will meet the requirements of increasing security and reducing operational overhead for databases in AWS is option B: Migrate the databases to Amazon RDS and configure encryption at rest Here's a breakdown of the available options and why option B is the best choice: A. Migrate the databases to Amazon EC2. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption. - This option involves migrating the databases to Amazon EC2, which requires managing the infrastructure and operating system. It also suggests using AWS KMS for encryption. While encryption is important for security, this option does not address the goal of reducing operational overhead. B. Migrate the databases to Amazon RDS. Configure encryption at rest. - This option suggests migrating the databases to Amazon RDS, a managed database service that handles infrastructure and operating system management. It also allows you to configure encryption at rest, ensuring the security of your sensitive data. By using Amazon RDS, you can offload the operational overhead to AWS, reducing the burden on your team. C. Migrate the data to Amazon S3. Use Amazon Macie for data security and protection. - This option involves migrating the data to Amazon S3, an object storage service. While Amazon S3 provides durability and scalability, it is not specifically designed for databases. Additionally, using Amazon Macie for data security and protection may not provide the same level of database-specific security features as Amazon RDS. D. Migrate the database to Amazon RDS. Use Amazon CloudWatch Logs for data security and protection. - This option suggests migrating the database to Amazon RDS, which is a good choice for managed database services. However, using Amazon CloudWatch Logs for data security and protection may not provide the same level of security features as configuring encryption at rest. In summary, option B (Migrate the databases to Amazon RDS and configure encryption at rest) is the best solution as it meets the requirements of increasing security and reducing operational overhead for databases in AWS.