A Financial Services Company Uses Amazon RDS for Oracle with Transparent

question 84

Multiple Choice

A financial services company uses Amazon RDS for Oracle with Transparent Data Encryption (TDE) . The company is required to encrypt its data at rest at all times. The key required to decrypt the data has to be highly available, and access to the key must be limited. As a regulatory requirement, the company must have the ability to rotate the encryption key on demand. The company must be able to make the key unusable if any potential security breaches are spotted. The company also needs to accomplish these tasks with minimum overhead. What should the database administrator use to set up the encryption to meet these requirements?

• A) AWS CloudHSM
• B) AWS Key Management Service (AWS KMS) with an AWS managed key
• C) AWS Key Management Service (AWS KMS) with server-side encryption
• D) AWS Key Management Service (AWS KMS) CMK with customer-provided material

---

Definitions:

Risk Preference

An individual's or entity's willingness to tolerate risk or uncertainty in investment or economic decisions.

Opportunity Cost

The cost of foregoing the next best alternative when making a decision.

After Tax Profits

The net income a company retains after all its tax obligations have been settled.

Expected Cost

The forecasted cost of an action or decision, taking into account all known risks and uncertainties.