Amazon Exam SAP-C02 Topic 8 Question 40 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 40
Topic #: 8

A company needs to use an AWS Transfer Family SFTP-enabled server with an Amazon S3 bucket to receive updates from a third-party data supplier. The data is encrypted with Pretty Good Privacy (PGP) encryption The company needs a solution that will automatically decrypt the data after the company receives the data

A solutions architect will use a Transfer Family managed workflow The company has created an 1AM service role by using an 1AM policy that allows access to AWS Secrets Manager and the S3 bucket The role's trust relationship allows the transfer amazonaws com service to assume the rote

What should the solutions architect do next to complete the solution for automatic decryption'?

AStore the PGP public key in Secrets Manager Add a nominal step in the Transfer Family managed workflow to decrypt files Configure PGP encryption parameters in the nominal step Associate the workflow with the Transfer Family server

BStore the PGP private key in Secrets Manager Add an exception-handling step in the Transfer Family managed workflow to decrypt files Configure PGP encryption parameters in the exception handler Associate the workflow with the SFTP user

CStore the PGP private key in Secrets Manager Add a nominal step in the Transfer Family managed workflow to decrypt files. Configure PGP decryption parameters in the nominal step Associate the workflow with the Transfer Family server

DStore the PGP public key in Secrets Manager Add an exception-handling step in the Transfer Family managed workflow to decrypt files Configure PGP decryption parameters in the exception handler Associate the workflow with the SFTP user

Show Suggested Answer

Suggested Answer: C

Store the PGP Private Key:

Step 1: In the AWS Management Console, navigate to AWS Secrets Manager.

Step 2: Store the PGP private key in Secrets Manager. Ensure the key is encrypted and properly secured.

Set Up the Transfer Family Managed Workflow:

Step 1: In the AWS Transfer Family console, create a new managed workflow.

Step 2: Add a nominal step to the workflow that includes the decryption of the files. Configure this step with the PGP decryption parameters, referencing the PGP private key stored in Secrets Manager.

Step 3: Associate this workflow with the Transfer Family SFTP server, ensuring that incoming files are automatically decrypted upon receipt.

This solution ensures that the data is securely decrypted as it is transferred from the SFTP server to the S3 bucket, automating the decryption process and leveraging AWS Secrets Manager for key management.

Reference

AWS Transfer Family Documentation

Using AWS Secrets Manager for Managing Secrets

AWS Transfer Family Managed Workflows

by Lashonda at Sep 18, 2024, 03:30 PM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jettie

21 days ago

Option C all the way! Gotta love those AWS Secrets, they're like the secret sauce of the cloud world. *winks*

upvoted 0 times

...

Belen

25 days ago

Hmm, this one's got me stumped. Maybe I should just go with my gut and choose Option C. What could go wrong, right? *nervous laughter*

upvoted 0 times

...

2 months ago

I agree with Paola. Option C seems like the right way to handle the automatic decryption of the files.

upvoted 0 times

Janet

10 days ago

Yes, it seems like the most straightforward way to ensure the data is automatically decrypted.

upvoted 0 times

...

Joanna

13 days ago

I agree, storing the PGP private key in Secrets Manager and configuring decryption parameters in the workflow makes sense.

upvoted 0 times

...

Shawana

20 days ago

I think option C is the best choice for automatic decryption.

upvoted 0 times

...

Irma

2 months ago

I'm not sure, option C also sounds like a valid choice. Storing the PGP private key and configuring decryption parameters in the workflow could work too

upvoted 0 times

...

2 months ago

I think the solutions architect should choose option A

upvoted 0 times

...