A company wants to encrypt an existing unencrypted RDS for Oracle database. What is the process the architect must follow?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Take a snapshot of the instance, copy the snapshot while enabling encryption, and restore a new instance from the encrypted snapshot

You cannot enable encryption on an existing live RDS database. The standard procedure is snapshot -> copy with encryption -> restore....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioAmazon RDS

A company wants to encrypt an existing unencrypted RDS for Oracle database. What is the process the architect must follow?

✓ Correct Answer & ExplanationAmazon RDS

Correct Answer

Take a snapshot of the instance, copy the snapshot while enabling encryption, and restore a new instance from the encrypted snapshot

Why This Answer Is Correct

You cannot enable encryption on an existing live RDS database. The standard procedure is snapshot -> copy with encryption -> restore.

📚 What This Question Tests

This question evaluates your knowledge of Amazon RDS — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Amazon RDS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.