Regarding encryption on data stored on your databases, namely Amazon RDS, which of the following statements is true? Choose the correct answer from the options below.

Answer options:

A.Encryption cannot be enabled on RDS instances using the AWS console. 
B.Encryption can be enabled on RDS instances to encrypt the underlying storage. This will, by default, also encrypt snapshots as they are created. No additional configuration needs to be made on the client-side for this to work.
C.Encryption can be enabled on RDS instances to encrypt the underlying storage, and this will by default also encrypt snapshots as they are created. However, some additional configuration needs to be made on the client-side for this to work.
D.Encryption can be enabled on RDS instances to encrypt the underlying storage, but you cannot encrypt snapshots as they are created.

Answer – B
Tip for the exam: You can encrypt your Amazon RDS instances and snapshots at rest by enabling the encryption option for your Amazon RDS DB instance (only certain EC2 instance types support encryption, more information is given below). Data that is encrypted at rest includes the underlying storage for a DB instance, its automated backups, Read Replicas, and snapshots.
Option A is incorrect because the RDS instance encryption can be done through the AWS console.
Option B is CORRECT because once the encryption is enabled, its automated backups, read replicas, and snapshots are automatically encrypted without the need for any additional settings.
Option C is incorrect because no additional configurations need to be made from the client side, once the encryption is enabled.
Option D is incorrect because, as mentioned above, the snapshots get automatically encrypted once the encryption is turned-on on the RDS instance.
For more information on RDS encryption, please visit the below URL-
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
See the list of instance types that support the encryption-
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html#Overview.Encryption.Availability