Home / Amazon / SAA-C01 / Question 136

A Solutions Architect is designing a solution that will include a database in Amazon RDS. Corporate security policy mandates that the database, its logs, and its backups are all encrypted.Which is the MOST efficient option to fulfill the security policy using Amazon RDS?

• A. Launch an Amazon RDS instance with encryption enabled. Enable encryption for logs and backups.

• B. Launch an Amazon RDS instance. Enable encryption for database, logs and backups.

• C. Launch an Amazon RDS instance with encryption enabled. Logs and backups are automatically encrypted.

• D. Launch an Amazon RDS instance. Enable encryption for backups. Encrypt logs with a database-engine feature.

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html