A Security Architect Is Evaluating Managed Solutions for Storage of Encryption

question 262

Multiple Choice

A Security Architect is evaluating managed solutions for storage of encryption keys. The requirements are: -Storage is accessible by using only VPCs. -Service has tamper-evident controls. -Access logging is enabled. -Storage has high availability. Which of the following services meets these requirements?

• A) Amazon S3 with default encryption
• B) AWS CloudHSM
• C) Amazon DynamoDB with server-side encryption
• D) AWS Systems Manager Parameter Store

---

Definitions:

Deposit Ticket

This is a document that accompanies a bank deposit, listing the amounts of cash and checks being deposited and their respective details.

Negotiable Instrument

A document guaranteeing the payment of a specified amount of money, either on demand or at a set time, with the payer specified on the document.

Endorsement

Signing one's name on the back of a check or other document, authorizing its transfer or acceptance, or the act of publicly supporting a product, service, or candidate.

Cash Receipts

The collection of money, including coins, notes, and electronic payments, received by a business during a given period.