Amazon Exam AWS-Security-Specialty Topic 3 Question 2 Discussion

Actual exam question for Amazon's Amazon AWS Certified Security - Specialty exam

Question #: 2
Topic #: 3

[All Amazon AWS Certified Security - Specialty Questions]

A Security Engineer is implementing a solution to allow users to seamlessly encrypt Amazon S3 objects without having to touch the keys directly. The solution must be highly scalable without requiring continual management. Additionally, the organization must be able to immediately delete the encryption keys.

Which solution meets these requirements?

AUse AWS KMS with AWS managed keys and the ScheduleKeyDeletion API with a PendingWindowInDays set to 0 to remove the keys if necessary.

BUse KMS with AWS imported key material and then use the DeletelmportedKeyMaterial API to remove the key material if necessary.

CUse AWS CloudHSM to store the keys and then use the CloudHSM API or the PKCS11 library to delete the keys if necessary.

DUse the Systems Manager Parameter Store to store the keys and then use the service API operations to delete the key if necessary.

Show Suggested Answer

Suggested Answer: B

by Serina at Dec 25, 2022, 12:14 PM

Limited Time Offer

25%

Off

Get Premium AWS-Security-Specialty Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!