A Banking Company Is Currently Using an Amazon Redshift Cluster

question 9

Multiple Choice

A banking company is currently using an Amazon Redshift cluster with dense storage (DS) nodes to store sensitive data. An audit found that the cluster is unencrypted. Compliance requirements state that a database with sensitive data must be encrypted through a hardware security module (HSM) with automated key rotation. Which combination of steps is required to achieve compliance? (Choose two.)

• A) Set up a trusted connection with HSM using a client and server certificate with automatic key rotation.
• B) Modify the cluster with an HSM encryption option and automatic key rotation.
• C) Create a new HSM-encrypted Amazon Redshift cluster and migrate the data to the new cluster.
• D) Enable HSM with key rotation through the AWS CLI.
• E) Enable Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) encryption in the HSM.

---

Definitions:

Bank Service Charge

Fees charged by banks for the use of their services, such as account maintenance fees, non-sufficient funds (NSF) fees, and transaction fees.

Adjusting Journal Entries

Entries made in accounting records at the end of an accounting period to allocate income and expenditures to the period in which they actually occurred.

NSF Check

A check that cannot be processed due to insufficient funds in the account of the drawer, commonly known as a bounced check.

Bank Service Charge

Fees charged by a bank for the maintenance of account services and other banking transactions.