Amazon Exam SCS-C01 Topic 7 Question 1 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 1
Topic #: 7

A company has decided to use encryption in its AWS account to secure the objects in Amazon S3 using server-side encryption. Object sizes range from 16.000 B to 5 MB. The requirements are as follows:

* The key material must be generated and stored in a certified Federal Information Processing Standard (FIPS) 140-2 Level 3 machine.

* The key material must be available in multiple Regions.

Which option meets these requirements?

AUse an AWS KMS customer managed key and store the key material in AWS with replication across Regions

BUse an AWS customer managed key, import the key material into AWS KMS using in-house AWS CloudHSM. and store the key material securely in Amazon S3.

CUse an AWS KMS custom key store backed by AWS CloudHSM clusters, and copy backups across Regions

DUse AWS CloudHSM to generate the key material and backup keys across Regions Use the Java Cryptography Extension (JCE) and Public Key Cryptography Standards #11 (PKCS #11) encryption libraries to encrypt and decrypt the data.

Show Suggested Answer

Suggested Answer: D

by Rolande at May 08, 2022, 05:00 PM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!