EBS

Question 1

EBS volumes can only be encrypted on creation.

Answer 1

True

Question 2

When you create an EBS volume is created, and set to encrypted, but not yet been attatched to an EC2 instance. Is the volume encrypted?

Answer 2

No. All encryption of data is handled by the EC2 instance

Question 3

True or false. All EBS encryption is handled by the EC2 it is attatched to?

Answer 3

True

Question 4

When encrypting amp EBS volume. The DEK is encrypted, then stored in the META data of the volume?

Answer 4

True

Question 5

Outline the steps required to encrypt a none encrypted EBS volume

Answer 5

Take a snapshot
Copy that snapshot
In the copy process enable encryption.