A public-works team enables encryption on an Amazon EBS volume attached to an EC2 instance that holds GIS files. Which encryption category does that control primarily represent?
Select an answer to reveal the explanation.
Short Explanation
An encrypted EBS volume is like locking the filing cabinet bolted into the truck — the GIS files sitting on that disk are protected at rest. That is not the same as TLS on the network or Shield soaking up floods. Backups and certificates are separate conversations.
Full Explanation
Amazon EBS encryption protects data stored on the volume, which is a classic encryption-at-rest control for block storage attached to EC2. It does not by itself mean DDoS mitigation or browser certificate pinning, and it is distinct from encryption in transit on the network path. Recognizing volume encryption as at-rest protection is the foundational skill being tested.