A Company Is Building a Hybrid PCI-DSS Compliant Application That

question 101

Multiple Choice

A company is building a hybrid PCI-DSS compliant application that runs in the us-west-2 Region and on-premises. The application sends access logs from all locations to a single Amazon S3 bucket in us-west-2. To protect this sensitive data, the bucket policy is configured to deny access from public IP addresses. How should an engineer configure the network to meet these requirements?

• A) Configure an AWS Direct Connect private virtual interface to the company's AWS VPC in us-west-2. Create a VPC endpoint and configure the on-premises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.
• B) Configure a VPN connection to the company's AWS VPC in us-west-2 and use BGP to advertise routes for Amazon S3.
• C) Configure a Direct Connect connection public virtual interface to us-west-2. Leverage an on-premises HTTPS proxy to send traffic to Amazon S3 over a Direct Connect connection.
• D) Configure a VPN connection to the company's AWS VPC in us-west-2. Create a NAT gateway and configure the on-premises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.

---

Definitions:

Exterminate

To completely destroy or eliminate a group, species, or population, often used in contexts of war, genocide, or pest control.

New World

A term historically used by Europeans to refer to the Americas, discovered by Europeans in the late 15th and early 16th centuries.

Intermarried

Refers to the act of marrying someone from a different ethnic, religious, or racial group, often highlighting instances of cultural or societal integration and exchange.

Mixed-race Children

Children born to parents of different racial backgrounds, who may inherit aspects of both parents' cultural, racial, or ethnic identities.