Bird
Raised Fist0

How can you combine encryption at rest with snapshot encryption to secure Elasticsearch backups?

hard🚀 Application Q9 of Q15
Elasticsearch - Security
How can you combine encryption at rest with snapshot encryption to secure Elasticsearch backups?
ASnapshots do not support encryption in Elasticsearch
BOnly enable transport SSL, snapshots are always unencrypted
CEnable disk encryption on storage and configure snapshot repository encryption
DUse HTTP SSL to encrypt snapshots during backup
Step-by-Step Solution
Solution:
  1. Step 1: Understand encryption at rest and snapshots

    Encryption at rest protects live data on disk; snapshots are backups stored separately.
  2. Step 2: Secure snapshots with repository encryption

    Encrypting snapshot repositories ensures backups are encrypted.
  3. Final Answer:

    Enable disk encryption on storage and configure snapshot repository encryption -> Option C
  4. Quick Check:

    Encrypt both disk and snapshots for full data protection [OK]
Quick Trick: Encrypt snapshots by configuring encrypted repositories [OK]
Common Mistakes:
MISTAKES
  • Assuming transport SSL encrypts snapshots
  • Thinking snapshots cannot be encrypted
  • Confusing HTTP SSL with snapshot encryption

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Elasticsearch Quizzes