Câu 139: AWS Certified Security - Specialty(Old)

Auditors for a health care company have mandated that all data volumes be encrypted at rest. Infrastructure is deployed mainly via AWS CloudFormation; however, third-party frameworks and manual deployment are required on some legacy systems. What is the BEST way to monitor, on a recurring basis, whether all EBS volumes are encrypted?

1. A. On a recurring basis, update all IAM user policies to require that EC2 instances are created with an encrypted volume.
2. B. Configure an AWS Config rule to run on a recurring basis for volume encryption. — đáp án hiện tại
3. C. Set up Amazon Inspector rules for volume encryption to run on a recurring schedule.
4. D. Use CloudWatch Logs to determine whether instances were created with an encrypted volume.