Amazon Exam DAS-C01 Topic 7 Question 98 Discussion

Actual exam question for Amazon's DAS-C01 exam

Question #: 98
Topic #: 7

A company uses an Amazon Redshift provisioned cluster for data analysis. The data is not encrypted at rest. A data analytics specialist must implement a solution to encrypt the data at rest.

Which solution will meet this requirement with the LEAST operational overhead?

AUse the ALTER TABLE command with the ENCODE option to update existing columns of the Redshift tables to use LZO encoding.

BExport data from the existing Redshift cluster to Amazon S3 by using the UNLOAD command with the ENCRYPTED option. Create a new Redshift cluster with encryption configured. Load data into the new cluster by using the COPY command.

CCreate a manual snapshot of the existing Redshift cluster. Restore the snapshot into a new Redshift cluster with encryption configured.

DModify the existing Redshift cluster to use AWS Key Management Service (AWS KMS) encryption. Wait for the cluster to finish resizing.

Show Suggested Answer

Suggested Answer: D

by Annabelle at Jul 16, 2024, 03:34 PM

Limited Time Offer

25%

Off

Get Premium DAS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jennifer

20 hours ago

Wow, these options are like a Choose Your Own Adventure book, but with way more encryption and way less excitement. D is the way to go, unless you're feeling particularly adventurous... or masochistic.

upvoted 0 times

...

Valentin

2 days ago

I don't know, I'm kind of partial to option A. LZO encoding sounds like it could be a fun little experiment, you know? Like, spicing things up a bit.

upvoted 0 times

...

Han

5 days ago

D is the clear winner here. Who wants to deal with all the export/import steps in B? And A and C both seem way more complicated than necessary.

upvoted 0 times

...

Shaun

19 days ago

Option B sounds like a lot of work - exporting, creating a new cluster, and loading the data back in? No thanks, I'll pass on that one.

upvoted 0 times

...

Cristy

21 days ago

I agree, D is the way to go. Modifying the existing cluster to use KMS encryption is probably the quickest and least operationally intensive solution.

upvoted 0 times

Chauncey

4 days ago

User 2: Yeah, I agree. It's probably the quickest way to encrypt the data at rest without too much operational overhead.

upvoted 0 times

...

Lorrine

12 days ago

User 1: I think D is the best option. Modifying the existing cluster to use KMS encryption seems like the easiest solution.

upvoted 0 times

...

Troy

24 days ago

Option D seems like the easiest way to encrypt the data at rest without having to move everything around. The cluster will just need to resize, which is less disruptive than migrating the data.

upvoted 0 times