AWS Certified Developer Associate Practice Test 3

Correct answer - "EBS volumes support in flight encryption and do support encryption at rest using KMS" : When you create an encrypted EBS volume and attach it to a supported instance type, the following types of data are encrypted: Data at rest inside the volumeAll data moving between the volume and the instanceAll snapshots created from the volumeAll volumes created from those snapshots.

"EBS volumes do not support in flight encryption but do support encryption at rest using KMS" - All data moving between the volume and the instance is encrypted

"EBS volumes support in flight encryption but no encryption at rest" - Data at rest inside the volume is encrypted

"EBS volumes aren't secure" - EBS volumes offer encryption without the need to build, maintain, and secure your own key management infrastructure

For more information visit