An organization has an active Amazon EFS file system (fs-85ba41fc) used by 10 EC2 instances. They are concerned the file system is not encrypted. How can they ensure the file system is encrypted while preserving data access?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a new encrypted EFS file system, copy all data to it, and reconnect the EC2 hosts to the new file system..
Why this is the answer
The correct approach is to create a new encrypted EFS file system, copy the data, and then remount the EC2 instances. Amazon EFS encryption settings (at-rest and in-transit) are configured at file system creation and cannot be changed afterward. Attempting to enable encryption on an existing EFS file system using the AWS CLI or any other method will fail. Encrypting host local disks does not encrypt the EFS file system itself. While EFS supports encryption in transit, enabling it on mount connections does not encrypt the data at rest if the file system was not created with encryption enabled. Therefore, a migration to a new encrypted file system is necessary.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed