A Company Wants to Migrate Its On-Premises MySQL Databases to Amazon

question 102

Multiple Choice

A company wants to migrate its on-premises MySQL databases to Amazon RDS for MySQL. To comply with the company's security policy, all databases must be encrypted at rest. RDS DB instance snapshots must also be shared across various accounts to provision testing and staging environments. Which solution meets these requirements?

• A) Create an RDS for MySQL DB instance with an AWS Key Management Service (AWS KMS) customer managed CMK. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
• B) Create an RDS for MySQL DB instance with an AWS managed CMK. Create a new key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
• C) Create an RDS for MySQL DB instance with an AWS owned CMK. Create a new key policy to include the administrator user name of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
• D) Create an RDS for MySQL DB instance with an AWS CloudHSM key. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

---

Definitions:

Payable to Order

A phrase indicating that a financial instrument, such as a check, is transferable to a specific person or entity mentioned in the document.

Negotiable

Referring to the ability of the terms of an agreement, document, or financial instrument to be adjusted or transferred in accordance with all parties' consent.

Certificates of Deposit

Financial instruments issued by banks that offer a fixed interest rate in exchange for keeping deposited funds untouched for a predetermined period.

Nonnegotiable

Pertaining to a term, condition, or instrument that cannot be altered or bargained upon, often legally or contractually fixed.