Amazon Exam DAS-C01 Topic 7 Question 98 Discussion

Actual exam question for Amazon's DAS-C01 exam

Question #: 98
Topic #: 7

A company uses an Amazon Redshift provisioned cluster for data analysis. The data is not encrypted at rest. A data analytics specialist must implement a solution to encrypt the data at rest.

Which solution will meet this requirement with the LEAST operational overhead?

AUse the ALTER TABLE command with the ENCODE option to update existing columns of the Redshift tables to use LZO encoding.

BExport data from the existing Redshift cluster to Amazon S3 by using the UNLOAD command with the ENCRYPTED option. Create a new Redshift cluster with encryption configured. Load data into the new cluster by using the COPY command.

CCreate a manual snapshot of the existing Redshift cluster. Restore the snapshot into a new Redshift cluster with encryption configured.

DModify the existing Redshift cluster to use AWS Key Management Service (AWS KMS) encryption. Wait for the cluster to finish resizing.

Show Suggested Answer

Suggested Answer: D

by Annabelle at Jul 16, 2024, 03:34 PM

Limited Time Offer

25%

Off

Get Premium DAS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jennifer

4 months ago

Wow, these options are like a Choose Your Own Adventure book, but with way more encryption and way less excitement. D is the way to go, unless you're feeling particularly adventurous... or masochistic.

upvoted 0 times

...

Valentin

4 months ago

I don't know, I'm kind of partial to option A. LZO encoding sounds like it could be a fun little experiment, you know? Like, spicing things up a bit.

upvoted 0 times

Kaycee

3 months ago

I see your point, but I still think option A could be a fun way to encrypt the data at rest.

upvoted 0 times

...

Theodora

3 months ago

I think option B might be more practical. Exporting data to S3 and creating a new cluster with encryption seems like a straightforward solution.

upvoted 0 times

...

Desmond

3 months ago

Option A does sound interesting. It could be a cool experiment to try out LZO encoding.

upvoted 0 times

...

Han

4 months ago

D is the clear winner here. Who wants to deal with all the export/import steps in B? And A and C both seem way more complicated than necessary.

upvoted 0 times

Alida

2 months ago

No need to go through all the export/import hassle with B.

upvoted 0 times

...

Whitley

2 months ago

I think modifying the existing cluster is the way to go.

upvoted 0 times

...

Sharen

3 months ago

Yeah, using AWS KMS encryption is definitely the easiest option.

upvoted 0 times

...

Trinidad

3 months ago

I agree, D seems like the most straightforward solution.

upvoted 0 times

...

Shaun

4 months ago

Option B sounds like a lot of work - exporting, creating a new cluster, and loading the data back in? No thanks, I'll pass on that one.

upvoted 0 times

...

Cristy

4 months ago

I agree, D is the way to go. Modifying the existing cluster to use KMS encryption is probably the quickest and least operationally intensive solution.

upvoted 0 times

Tyra

3 months ago

D does sound like the most efficient choice. It's important to keep things simple when implementing encryption.

upvoted 0 times

...

Chauncey

4 months ago

Yeah, I agree. It's probably the quickest way to encrypt the data at rest without too much operational overhead.

upvoted 0 times

...

Lorrine

4 months ago

I think D is the best option. Modifying the existing cluster to use KMS encryption seems like the easiest solution.

upvoted 0 times

...

Troy

4 months ago

Option D seems like the easiest way to encrypt the data at rest without having to move everything around. The cluster will just need to resize, which is less disruptive than migrating the data.

upvoted 0 times

Melissia

3 months ago

Yeah, it seems like the most efficient solution with the least operational overhead.

upvoted 0 times

...

Cortney

3 months ago

D) Modify the existing Redshift cluster to use AWS Key Management Service (AWS KMS) encryption. Wait for the cluster to finish resizing.

upvoted 0 times

...

Tegan

4 months ago

That sounds like a good option. It's less disruptive than moving everything around.

upvoted 0 times

...

Rhea

4 months ago

D) Modify the existing Redshift cluster to use AWS Key Management Service (AWS KMS) encryption. Wait for the cluster to finish resizing.

upvoted 0 times

...

Becky

4 months ago

I personally think option B is the most efficient, as it involves exporting data to S3 and creating a new cluster with encryption.

upvoted 0 times

...

Dortha

5 months ago

I disagree, I believe option C is the way to go as it is a simple solution.

upvoted 0 times

...

Lavonna

5 months ago

I think option D is the best choice because it involves minimal operational overhead.

upvoted 0 times

...