Amazon Exam BDS-C00 Topic 3 Question 92 Discussion

Actual exam question for Amazon's BDS-C00 exam

Question #: 92
Topic #: 3

An organization needs to store sensitive information on Amazon S3 and process it through Amazon EMR. Data must be encrypted on Amazon S3 and Amazon EMR at rest and in transit. Using Thrift Server, the Data Analysis team users HIVE to interact with this data. The organization would like to grant access to only specific databases and tables, giving permission only to the SELECT statement.

Which solution will protect the data and limit user access to the SELECT statement on a specific portion of data?

AConfigure Transparent Data Encryption on Amazon EMR. Create an Amazon EC2 instance and install Apache Ranger. Configure the authorization on the cluster to use Apache Ranger.

BConfigure data encryption at rest for EMR File System (EMRFS) on Amazon S3. Configure data encryption in transit for traffic between Amazon S3 and EMRFS. Configure storage and SQL base authorization on HiveServer2.

CUse AWS KMS for encryption of data. Configure and attach multiple roles with different permissions based on the different user needs.

DConfigure Security Group on Amazon EMR. Create an Amazon VPC endpoint for Amazon S3. Configure HiveServer2 to use Kerberos authentication on the cluster.

Show Suggested Answer

Suggested Answer: C

by Mendy at May 09, 2024, 08:38 AM

Limited Time Offer

25%

Off

Get Premium BDS-C00 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mari

2 months ago

I bet the exam writer is like, 'Let's see if they can spot the most secure and efficient solution!' Gotta love these tricky certification questions.

upvoted 0 times

Pansy

1 months ago

D) Configure Security Group on Amazon EMR. Create an Amazon VPC endpoint for Amazon S3. Configure HiveServer2 to use Kerberos authentication on the cluster.

upvoted 0 times

...

Simona

1 months ago

C) Use AWS KMS for encryption of data. Configure and attach multiple roles with different permissions based on the different user needs.

upvoted 0 times

...

Kimberely

2 months ago

B) Configure data encryption at rest for EMR File System (EMRFS) on Amazon S3. Configure data encryption in transit for traffic between Amazon S3 and EMRFS. Configure storage and SQL base authorization on HiveServer2.

upvoted 0 times

...

Lenna

3 months ago

Option A seems a bit overkill. Why bring in Apache Ranger when we can handle the encryption and authorization with the built-in EMR and Hive features?

upvoted 0 times

Alba

2 months ago

D) Configure Security Group on Amazon EMR. Create an Amazon VPC endpoint for Amazon S3. Configure HiveServer2 to use Kerberos authentication on the cluster.

upvoted 0 times

...

Anthony

2 months ago

C) Use AWS KMS for encryption of data. Configure and attach multiple roles with different permissions based on the different user needs.

upvoted 0 times

...

Xochitl

2 months ago

upvoted 0 times

...

Na

3 months ago

Haha, I love the idea of 'Kerberos authentication on the cluster' in Option D. That's some serious security! But I don't think it's the best fit for this scenario.

upvoted 0 times

Nell

1 months ago

Haha, I agree! Option B seems like the best fit for this scenario. It covers both encryption and authorization aspects.

upvoted 0 times

...

Evette

2 months ago

C) Use AWS KMS for encryption of data. Configure and attach multiple roles with different permissions based on the different user needs.

upvoted 0 times

...

Florinda

2 months ago

upvoted 0 times

...

Corrinne

3 months ago

I'm leaning towards Option C. Using AWS KMS for encryption and configuring multiple roles with different permissions sounds like a flexible and secure approach.

upvoted 0 times

Moon

1 months ago

That's a valid point. Maybe we should consider Option A as well for a more comprehensive approach.

upvoted 0 times

...

Florinda

1 months ago

But what about using Apache Ranger for authorization? Wouldn't that be more efficient?

upvoted 0 times

...

Tanja

1 months ago

I agree, having multiple roles with different permissions adds an extra layer of security.

upvoted 0 times

...

Oliva

3 months ago

Option C sounds like a good choice. AWS KMS for encryption is reliable.

upvoted 0 times

...

Daniel

3 months ago

Option B seems like the way to go. Encrypting the data at rest and in transit, and then configuring authorization on HiveServer2 to limit access to specific databases and tables, is a comprehensive solution.

upvoted 0 times

Ricarda

2 months ago

I agree. It's important to have encryption in place for both storage and data transfer, along with strict authorization controls to protect sensitive information.

upvoted 0 times

...

Stephaine

3 months ago

upvoted 0 times

...

Coral

3 months ago

I'm not sure, I think option C could also work well. Using AWS KMS for encryption and attaching roles with different permissions seems like a good approach too.

upvoted 0 times

...

Hannah

3 months ago

I agree with Arlene. Option B seems like the most comprehensive solution to protect the data and limit user access effectively.

upvoted 0 times

...

Arlene

4 months ago

I think option B is the best solution. It covers encryption at rest and in transit, and also limits user access with SQL base authorization on HiveServer2.

upvoted 0 times

...