Q60 — AWS DVA-C02 第2章

第 60/100 题 | ← 返回第2章

伊家交司正在构建伊个计算密集型应用程序，该应用程序将在伊婚Amazon EC 2实例白声行。该应用程序使用附加的Amazon EBS 磁盘来存储数哪。该应用程序将处理敏守信息，拍有数哪都必场加密。 开发人乡应该如何容保数哪在磁盘白加密而不影响考能？

• A. 配置Amazon EC 2实例队列以使用加密的EBS卷来存储数据。 ✓
• B. 添加逻辑以将所有数据写入加密的Amazon S 3存储桶。
• C. 向将加密和解密所有数据的应用程序添加自定义加密算法。
• D. 使用加密的根卷创建新的Amazon 系统映像(AMI),并将数据存储到临时磁盘。

正确答案: A. 配置Amazon EC 2实例队列以使用加密的EBS卷来存储数据。

解析

参考： Https://docs.aws.amazon.com/AWSEC2/atest/UserGuide/EBSEncryption.html Use Amazon EBS encryption as a straight-forward encryption solution for Your EBS resources associated with your EC2 instances. With Amazon EBS Encryption, you aren t required to build, maintain, and secure your own Key management infrastructure. Amazon EBS encryption uses AwS KMS keys When creating encrypted volumes and snapshots. Encryption operations occur on the servers that host Ec2 instances Ensuring the security of both data-at-rest and data-in-transit between An Instance and its attached EBS storage. You can attach both encrypted and unencrypted volumes to an instance Simultaneously.