ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 254 - DVA-C02 discussion

Report
Export

A company is building an application to accept data from customers. The data must be encrypted at rest and in transit.

The application uses an Amazon API Gateway API that resolves to AWS Lambda functions. The Lambda functions store the data in an Amazon Aurora MySQL DB cluster. The application worked properly during testing.

A developer configured an Amazon CloudFront distribution with field-level encryption that uses an AWS Key Management Service (AWS KMS) key. After the configuration of the distribution, the application behaved unexpectedly. All the data in the database changed from plaintext to ciphertext.

The developer must ensure that the data is not stored in the database as the ciphertext from the CloudFront field-level encryption.

Which solution will meet this requirement?

A.

Change the CloudFront Viewer protocol policy from 'HTTP and HTTPS' to 'HTTPS only.'

Answers
A.

Change the CloudFront Viewer protocol policy from 'HTTP and HTTPS' to 'HTTPS only.'

B.

Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database.

Answers
B.

Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database.

C.

Enable encryption on the DB cluster by using the same KMS key that is used in CloudFront.

Answers
C.

Enable encryption on the DB cluster by using the same KMS key that is used in CloudFront.

D.

Request and deploy a new SSL certificate to use with the CloudFront distribution.

Answers
D.

Request and deploy a new SSL certificate to use with the CloudFront distribution.

Suggested answer: B
asked 23/10/2024
Colin Huisman
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first