How can you secure data at rest on an EBS volume?


How can you secure data at rest on an EBS volume?

A.
Write the data randomly instead of sequentially.

B.
Use an encrypted file system on top of the BBS volume.

C.
Encrypt the volume using the S3 server-side encryption service.

D.
Create an IAM policy that restricts read and write access to the volume.

E.
Attach the volume to an instance using EC2’s SSL interface.



Discussion

13 Responses to “How can you secure data at rest on an EBS volume?”

  1. Brian Smith says:

    B

  2. networkmanagers says:

    B

  3. simhachalam says:

    Encrypt the volume using the S3 server-side encryption service

  4. donkeynuts says:

    Check this: https://media.amazonwebservices.com/AWS_Securing_Data_at_Rest_with_Encryption.pdf

    Under the EBS section we have: “Another option would be to use
    file system-level encryption, which works by stacking an encrypted file system on top of an existing file system”

    So yeah B

  5. ds says:

    It’s not C; C is a trick answer as it’s taking about S3 encryption (which is encryption on S3, not EBS). The question is about EBS, an d the only applicable answer is to use an encrypted file system. EBS encryption is possible, but there’s no answer with that option….

Post a Comment