Courseiva
← DEA-C01
Full test
Data Security and Governance →hardMultiple ChoiceObjective-mapped

DEA-C01 Data Security and Governance Practice Question

A company uses Amazon Redshift for data warehousing. The security team requires that all data stored in Redshift be encrypted at rest. The current cluster is unencrypted. Which approach should the data engineer take to meet this requirement with minimal downtime?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Take a snapshot of the existing cluster and restore it to a new encrypted cluster.

Redshift allows restoring a snapshot to a new encrypted cluster. The engineer can take a snapshot of the existing cluster, restore it to a new cluster with encryption enabled, and then redirect traffic to the new cluster. Option A is wrong because encryption cannot be enabled on an existing cluster. Option B is wrong because COPY command does not encrypt the cluster. Option C is wrong because unloading and reloading data would cause significant downtime.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Modify the cluster to enable encryption.

    Why it's wrong here

    Redshift does not support enabling encryption on an existing cluster.

  • ✗

    Unload data to S3 and reload into a new encrypted cluster.

    Why it's wrong here

    This is possible but would cause more downtime than snapshot restore.

  • ✗

    Use the COPY command to load data into a new encrypted table.

    Why it's wrong here

    This would require creating a new table in the same unencrypted cluster.

  • ✓

    Take a snapshot of the existing cluster and restore it to a new encrypted cluster.

    Why this is correct

    Snapshot restore allows creating an encrypted cluster with minimal downtime.

About these practice questions

Courseiva writes every DEA-C01 question from scratch — 1,711 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.