A company’s legacy application is currently relying on a single-instance Amazon RDS MySQL database
without encryption Due to new compliance requirements, all existing and new data in this database must be
encrypted How should this be accomplished?
A. Take a snapshot of the RDS instance Create an encrypted copy of the snapshot Restore the RDS instance
from the encrypted snapshot
© B. Enable RDS Multi-AZ mode with encryption at rest enabled Perform a failover to the standby instance to
delete the original instance
© C. Create an RDS read replica with encryption at rest enabled Promote the read replica to master and switch the
application over to the new master Delete the old RDS instance.
© D. Create an Amazon S3 bucket with server-side encryption enabled Move all the data to Amazon $3 Delete the
RDS instance
