A Company Uses the Amazon Kinesis SDK to Write Data

question 6

Multiple Choice

A company uses the Amazon Kinesis SDK to write data to Kinesis Data Streams. Compliance requirements state that the data must be encrypted at rest using a key that can be rotated. The company wants to meet this encryption requirement with minimal coding effort. How can these requirements be met?

• A) Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Use the AWS Encryption SDK, providing it with the key alias to encrypt and decrypt the data.
• B) Create a customer master key (CMK) in AWS KMS. Assign the CMK an alias. Enable server-side encryption on the Kinesis data stream using the CMK alias as the KMS master key.
• C) Create a customer master key (CMK) in AWS KMS. Create an AWS Lambda function to encrypt and decrypt the data. Set the KMS key ID in the function's environment variables.
• D) Enable server-side encryption on the Kinesis data stream using the default KMS key for Kinesis Data Streams.

---

Definitions:

Painting Equipment

Assets used in the operation of a painting business or for painting activities, classified as long-term if they provide benefits over multiple periods.

Accounts Payable

The balance of money owed to suppliers for goods or services purchased on credit and not yet paid.

Supplies Expense

The cost incurred from consuming supplies in the operations of a business, recognized as an expense when used rather than when purchased.

Billing

The process of issuing invoices to customers for goods or services provided.