A Company Has an Encrypted Amazon Redshift Cluster

question 5

Multiple Choice

A company has an encrypted Amazon Redshift cluster. The company recently enabled Amazon Redshift audit logs and needs to ensure that the audit logs are also encrypted at rest. The logs are retained for 1 year. The auditor queries the logs once a month. What is the MOST cost-effective way to meet these requirements?

• A) Encrypt the Amazon S3 bucket where the logs are stored by using AWS Key Management Service (AWS KMS). Copy the data into the Amazon Redshift cluster from Amazon S3 on a daily basis. Query the data as required.
• B) Disable encryption on the Amazon Redshift cluster, configure audit logging, and encrypt the Amazon Redshift cluster. Use Amazon Redshift Spectrum to query the data as required.
• C) Enable default encryption on the Amazon S3 bucket where the logs are stored by using AES-256 encryption. Copy the data into the Amazon Redshift cluster from Amazon S3 on a daily basis. Query the data as required.
• D) Enable default encryption on the Amazon S3 bucket where the logs are stored by using AES-256 encryption. Use Amazon Redshift Spectrum to query the data as required.

---

Definitions:

Investment

Positioning resources, particularly money, with the expectation of accruing income or a profit.

Capital Gains

The profit achieved from the sale of an asset, like stocks or real estate, where the sale price exceeds the purchase price.

Stock Market

A collection of markets where stocks (shares of ownership in businesses) are bought, sold, and issued, reflecting the economic trends of a country or the world.

Investor

An individual or entity that allocates capital with the expectation of receiving financial returns.