A Software Company Needs to Make Sure User-Uploaded Documents Are

question 199

Multiple Choice

A software company needs to make sure user-uploaded documents are securely stored in Amazon S3. The documents must be encrypted at rest in Amazon S3. The company does not want to manage the security infrastructure in-house, but the company still needs extra protection to ensure it has control over its encryption keys due to industry regulations. Which encryption strategy should a Developer use to meet these requirements?

• A) Server-side encryption with Amazon S3 managed keys (SSE-S3)
• B) Server-side encryption with customer-provided encryption keys (SSE-C)
• C) Server-side encryption with AWS KMS managed keys (SSE-KMS)
• D) Client-side encryption

---

Definitions:

Recall and Destruction

The process of officially ordering the return of a product due to safety concerns or defects, followed by its disposal or destruction.

Lost Future Sales

Revenue that a business could have earned from sales but is unable to due to disruptions, competition, or other factors.

UCC Exception

A specific deviation from the Uniform Commercial Code, allowing for different applications of law in certain cases.

Federal Consumer Protection Laws

Legislation enacted by the federal government aimed at ensuring consumer rights are upheld, preventing fraud, deception, and unfair business practices.