List of questions
Related questions
Question 156 - DBS-C01 discussion
Amazon RDS for Oracle with Transparent Data Encryption is used by a financial services organization (TDE). At all times, the organization is obligated to encrypt its data at rest. The decryption key must be widely distributed, and access to the key must be restricted. The organization must be able to rotate the encryption key on demand to comply with regulatory requirements. If any possible security vulnerabilities are discovered, the organization must be able to disable the key. Additionally, the company's overhead must be kept to a minimal.
What method should the database administrator use to configure the encryption to fulfill these specifications?
A.
AWS CloudHSM
B.
AWS Key Management Service (AWS KMS) with an AWS managed key
C.
AWS Key Management Service (AWS KMS) with server-side encryption
D.
AWS Key Management Service (AWS KMS) CMK with customer-provided material
Your answer:
0 comments
Sorted by
Leave a comment first