The correct statements are A Region is a distinct geographic area that contains multiple, isolated, physically separate Availability Zones and Network traffic that traverses the AWS backbone between Availability Zones in the same Region is encrypted by default. Regions are global locations, and each one includes multiple AZs that are independent for power, cooling, and security, and AWS encrypts traffic flowing between AZs by default.

AWS uses the term Region for a grouping of logical data centers is wrong because AWS uses Availability Zone to refer to a group of one or more data centers, while a Region is the broader geographic construct.

An Availability Zone is a single data center that shares power and networking with other AZs in the Region is incorrect since AZs can be one or more data centers and are purposefully isolated for power, networking, and connectivity.

Encryption between Availability Zones must be enabled manually in the console is incorrect because AWS automatically encrypts inter-AZ traffic by default and does not require manual enablement for the backbone encryption.

Exam Tip

Remember: Region equals geographic area containing multiple AZs; AZ equals one or more data centers with independent power and networking; and inter-AZ traffic on the AWS network is encrypted by default.

Full AWS Practitioner Certification Question