ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 152 - DVA-C01 discussion

Report
Export

An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket. Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?

A.
Use the default AWS KMS customer master key for S3 in the Lambda function code.
Answers
A.
Use the default AWS KMS customer master key for S3 in the Lambda function code.
B.
Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
Answers
B.
Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
C.
Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
Answers
C.
Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
D.
Use a custom KMS customer master key created for S3 in the Lambda function code.
Answers
D.
Use a custom KMS customer master key created for S3 in the Lambda function code.
Suggested answer: C
asked 16/09/2024
Cesar Paredes
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first