Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon SAP-C02 Exam - Topic 10 Question 5 Discussion

A health insurance company stores personally identifiable information (PII) in an Amazon S3 bucket. The company uses server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the objects. According to a new requirement, all current and future objects in the S3 bucket must be encrypted by keys that the company's security team manages. The S3 bucket does not have versioning enabled.Which solution will meet these requirements?
D) In the S3 bucket properties, change the default encryption to AES-256 with a customer managed key. Attach a policy to deny unencrypted PutObject requests to any entities that access the S3 bucket. Use the AWS CLI to re-upload all objects in the S3 bucket.
A) In the S3 bucket properties, change the default encryption to SSE-S3 with a customer managed key. Use the AWS CLI to re-upload all objects in the S3 bucket. Set an S3 bucket policy to deny unencrypted PutObject requests.
B) In the S3 bucket properties, change the default encryption to server-side encryption with AWS KMS managed encryption keys (SSE-KMS). Set an S3 bucket policy to deny unencrypted PutObject requests. Use the AWS CLI to re-upload all objects in the S3 bucket.
C) In the S3 bucket properties, change the default encryption to server-side encryption with AWS KMS managed encryption keys (SSE-KMS). Set an S3 bucket policy to automatically encrypt objects on GetObject and PutObject requests.

Amazon SAP-C02 Exam - Topic 10 Question 5 Discussion

Actual exam question for Amazon's SAP-C02 exam
Question #: 5
Topic #: 10
[All SAP-C02 Questions]

A health insurance company stores personally identifiable information (PII) in an Amazon S3 bucket. The company uses server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the objects. According to a new requirement, all current and future objects in the S3 bucket must be encrypted by keys that the company's security team manages. The S3 bucket does not have versioning enabled.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Lucina at Dec 28, 2022, 02:25 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Verona
10 months ago
Why not just use SSE-S3 with a customer managed key? Seems simpler!
upvoted 0 times
...
Marisha
10 months ago
I think D is overkill, just stick with B.
upvoted 0 times
...
Willodean
10 months ago
Wait, can you really change encryption like that without versioning?
upvoted 0 times
...
Rochell
11 months ago
I agree, SSE-KMS is definitely more secure!
upvoted 0 times
...
Enola
11 months ago
Option B seems like the best choice with KMS keys.
upvoted 0 times
...
Paola
11 months ago
I recall that setting a bucket policy to deny unencrypted uploads is crucial, but I can't remember if that applies to all options or just some.
upvoted 0 times
...
Hollis
11 months ago
I’m a bit confused about whether changing to SSE-KMS automatically encrypts existing objects or if we need to re-upload them. I feel like we covered this in a similar question.
upvoted 0 times
...
Marnie
11 months ago
I think option B sounds familiar because it mentions using the AWS CLI to re-upload objects, which we practiced in class.
upvoted 0 times
...
Tegan
11 months ago
I remember we discussed the importance of using customer managed keys for better control over encryption, but I'm not sure if SSE-KMS is the right choice here.
upvoted 0 times
...
Adelina
11 months ago
Okay, let me think this through. The MIB, Agent, Managed Object, and NMS are all part of the SNMP model, but I'm not 100% sure which one specifically defines the device attributes.
upvoted 0 times
...
Thersa
11 months ago
Okay, let's see. The question is asking for the EXCEPTION, so I need to find the pricing method that is not mentioned in the other options. Negotiation, financial statements, and outside appraisal are all covered. I'll go with D, ambiguity as to the valuation date.
upvoted 0 times
...

Save Cancel