The Security Engineer Has Discovered That a New Application That

question 158

Multiple Choice

The Security Engineer has discovered that a new application that deals with highly sensitive data is storing Amazon S3 objects with the following key pattern, which itself contains highly sensitive data. Pattern: "randomID_datestamp_PII.csv" Example: "1234567_12302017_000-00-0000 csv" The bucket where these objects are being stored is using server-side encryption (SSE) . Which solution is the most secure and cost-effective option to protect the sensitive data?

• A) Remove the sensitive data from the object name, and store the sensitive data using S3 user-defined metadata.
• B) Add an S3 bucket policy that denies the action s3:GetObject
• C) Use a random and unique S3 object key, and create an S3 metadata index in Amazon DynamoDB using client-side encrypted attributes.
• D) Store all sensitive objects in Binary Large Objects (BLOBS) in an encrypted Amazon RDS instance.

---

Definitions:

Unconditional

Not subject to any conditions, limitations, or exceptions; often used in psychological contexts to describe types of positive regard or love.

Maslow's Hierarchy

A theory in psychology proposed by Abraham Maslow, depicting a five-tier model of human needs, from basic physiological needs to self-actualization.

Belongingness

The human emotional need to be an accepted member of a group.

Esteem Needs

In Maslow's hierarchy of needs, these represent the human need for respect, self-esteem, and recognition from others.