ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 3 - DAS-C01 discussion

Report
Export

A company uses the Amazon Kinesis SDK to write data to Kinesis Data Streams. Compliance requirements state that the data must be encrypted at rest using a key that can be rotated. The company wants to meet this encryption requirement with minimal coding effort. How can these requirements be met?

A.
Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Use the AWS Encryption SDK, providing it with the key alias to encrypt and decrypt the data.
Answers
A.
Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Use the AWS Encryption SDK, providing it with the key alias to encrypt and decrypt the data.
B.
Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Enable server-side encryption on the Kinesis data stream using the CMK alias as the KMS master key.
Answers
B.
Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Enable server-side encryption on the Kinesis data stream using the CMK alias as the KMS master key.
C.
Create a customer master key (CMK) in AWS KMS. Create an AWS Lambda function to encrypt and decrypt the data. Set the KMS key ID in the function’s environment variables.
Answers
C.
Create a customer master key (CMK) in AWS KMS. Create an AWS Lambda function to encrypt and decrypt the data. Set the KMS key ID in the function’s environment variables.
D.
Enable server-side encryption on the Kinesis data stream using the default KMS key for Kinesis Data Streams.
Answers
D.
Enable server-side encryption on the Kinesis data stream using the default KMS key for Kinesis Data Streams.
Suggested answer: B

Explanation:

Reference: https://aws.amazon.com/kinesis/data-streams/faqs/

asked 16/09/2024
ILLIA VELIASEVICH
46 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first