Correct Answer: Create a snapshot, and then copy the snapshot to a new encrypted one
To encrypt an existing unencrypted EBS volume, you must first create a snapshot of the volume, and then copy that snapshot to a new, encrypted volume using AWS KMS keys....
Correct Answer
Create a snapshot, and then copy the snapshot to a new encrypted one
Why This Answer Is Correct
To encrypt an existing unencrypted EBS volume, you must first create a snapshot of the volume, and then copy that snapshot to a new, encrypted volume using AWS KMS keys.
This question evaluates your knowledge of Amazon EBS — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding Amazon EBS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your application requires persistent block storage that survives Amazon EC2 instance termination. Which service should you use?
You need to create a backup of your Amazon EBS volume for disaster recovery. What feature should you use?
What is Amazon EBS (Elastic Block Store)?
What is the primary difference between Amazon EBS and EC2 Instance Store?
How can you create a point-in-time backup of an Amazon EBS volume?