Your company has a set of EBS volumes defined in AWS. The security mandate is that all EBS volumes are encrypted. What would be the most efficient way to notify the IT admin if there are any unencrypted volumes in the account?

Answer options:

A.Use AWS Inspector to inspect all the EBS volumes.
B.Use AWS Config to check for unencrypted EBS volumes.
C.Use AWS GuardDuty to check for the unencrypted EBS volumes.
D.Use AWS Lambda to check for the unencrypted EBS volumes.

Answer: B
Options A is incorrect because AWS Inspector cannot be used to check if EBS volumes are encrypted.
Option B is CORRECT because the encrypted-volumes config rule for AWS Config can be used to check for unencrypted volumes.
Options C is incorrect because AWS GuardDuty cannot be used to check if EBS volumes are encrypted.
Option D is incorrect because even though this is possible, trying to implement the solution along with just the Lambda service would not be as efficient as the AWS Config rule.
For more information on AWS Config and encrypted volumes, kindly refer to the below URL:
https://docs.aws.amazon.com/config/latest/developerguide/ec2-ebs-encryption-by-default.html