Q78 — AWS SAA-C03 Ch.14

Question 78 of 100 | ← Chapter 14

Q1078. A company discovers that an Amazon DynamoDB Accelerator (DAX) cluster for the company's web application workload is not encrypting data at rest. The company needs to resolve the security issue.Which solution will meet this requirement?

Correct Answer: B. Delete the existing DAX cluster. Recreate the DAX cluster, and configure the new cluster to encrypt the data at rest.

Explanation

To address the requirement of enabling encryption at rest for an existing Amazon DynamoDB Accelerator (DAX) cluster, let's evaluate each of the provided options:A. Stop the existing DAX cluster. Enable encryption at rest for the existing DAX cluster, and start the cluster again.DAX does not support enabling encryption at rest on an existing cluster after it has been created. Once a DAX cluster is created, its encryption settings cannot be changed. B. Delete the existing DAX cluster. Recreate the DAX cluster, and configure the new cluster to encrypt the data at rest.This is a viable solution. Since DAX clusters cannot be updated to enable encryption at rest after creation, the existing cluster must be deleted and a new one created with the encryption at rest option enabled. C. Update the configuration of the existing DAX cluster to encrypt the data at rest.This is not possible. As mentioned earlier, DAX clusters cannot be updated to change their encryption settings after creation.D. Integrate the existing DAX cluster with AWS Security Hub to automatically enable encryption at rest.AWS Security Hub helps you manage and improve your security posture across your AWS accounts. However, it does not have the capability to automatically enable encryption at rest for existing DAX clusters. Encryption settings must be configured during the creation of the DAX cluster.Conclusion:The correct solution to meet the requirement of enabling encryption at rest for an existing Amazon DynamoDB Accelerator (DAX) cluster is:B. Delete the existing DAX cluster. Recreate the DAX cluster, and configure the new cluster to encrypt the data at rest.This solution ensures that the DAX cluster will have encryption at rest enabled, addressing the security issue.