SAA-C03 Q42 · Security

Question

A company wants to standardize its Amazon Elastic Block Store (Amazon EBS) volume encryption strategy. The company also wants to minimize the cost and configuration effort required to operate the volume encryption check. Which solution will meet these requirements?

Accepted Answer

This question has two core requirements: (1) check whether EBS volumes are encrypted, and (2) minimize cost and configuration effort.

**How AWS Config solves both:**

1. **Built-in managed rule**: AWS Config provides a pre-built managed rule called `encrypted-volumes` that automatically evaluates whether EBS volumes are encrypted. There is zero custom code to write — you simply enable the rule.

2. **Continuous compliance monitoring**: AWS Config continuously monitors your resources. When a new EBS volume is created or an existing one changes, Config automatically evaluates it against the rule and flags non-compliant resources.

3. **Minimal configuration effort**: Enabling an AWS Config managed rule requires just a few clicks in the console or a few lines of CloudFormation/Terraform. No

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips