A company currently has a set of DynamoDB tables already defined and items already exist in the tables. As per the company’s updated security policy, it is now mandated that all data needs to be encrypted at rest? How can this be achieved?

Answer options:

A.Enable encryption for the DynamoDB tables
B.Enable global tables and then enable encryption
C.Create new tables with encryption enabled.
D.Use the encryption flag for the table

Answer – C
The AWS Documentation mentions the following
Encryption at rest can be enabled only when you are creating a new DynamoDB table. Currently, you can`t enable encryption at rest on an existing table. After encryption at rest is enabled, it can`t be disabled. We recommend that you enable encryption for any tables that contain sensitive data.
Because this is clearly mentioned in the documentation , all other options are incorrect
For more information on encryption at rest for DynamoDB, please visit the url
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html