ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 156 - DBS-C01 discussion

Report
Export

Amazon RDS for Oracle with Transparent Data Encryption is used by a financial services organization (TDE). At all times, the organization is obligated to encrypt its data at rest. The decryption key must be widely distributed, and access to the key must be restricted. The organization must be able to rotate the encryption key on demand to comply with regulatory requirements. If any possible security vulnerabilities are discovered, the organization must be able to disable the key. Additionally, the company's overhead must be kept to a minimal.

What method should the database administrator use to configure the encryption to fulfill these specifications?

A.
AWS CloudHSM
Answers
A.
AWS CloudHSM
B.
AWS Key Management Service (AWS KMS) with an AWS managed key
Answers
B.
AWS Key Management Service (AWS KMS) with an AWS managed key
C.
AWS Key Management Service (AWS KMS) with server-side encryption
Answers
C.
AWS Key Management Service (AWS KMS) with server-side encryption
D.
AWS Key Management Service (AWS KMS) CMK with customer-provided material
Answers
D.
AWS Key Management Service (AWS KMS) CMK with customer-provided material
Suggested answer: D

Explanation:


https://docs.aws.amazon.com/whitepapers/latest/kms-best-practices/aws-managed-and-customermanaged-cmks.html

asked 16/09/2024
Hamza BOULHEND
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first