A Developer Is Building a Highly Secure Healthcare Application Using

question 125

Multiple Choice

A developer is building a highly secure healthcare application using serverless components. This application requires writing temporary data to /tmp storage on an AWS Lambda function. How should the developer encrypt this data?

• A) Enable Amazon EBS volume encryption with an AWS KMS CMK in the Lambda function configuration so that all storage attached to the Lambda function is encrypted.
• B) Set up the Lambda function with a role and key policy to access an AWS KMS CMK. Use the CMK to generate a data key used to encrypt all data prior to writing to /tmp storage.
• C) Use OpenSSL to generate a symmetric encryption key on Lambda startup. Use this key to encrypt the data prior to writing to /tmp storage.
• D) Use an on-premises hardware security module (HSM) to generate keys, where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function.

---

Definitions:

Minimum Data Set

A standardized set of clinical and functional status elements that forms the foundation of the comprehensive assessment for all residents of long-term care facilities or settings.

Nursing Center

A facility or service that focuses on providing nursing care and medical attention for individuals who require it, often in a community setting.

Adult Day Care

A service providing supervised care and social activities for adults during the daytime, often for those with disabilities or dementia.

Primary Care

First contact in a given episode of illness that leads to a decision regarding a course of action to resolve the health problem.