A Security Engineer Is Building a Java Application That Is

question 38

Multiple Choice

A Security Engineer is building a Java application that is running on Amazon EC2. The application communicates with an Amazon RDS instance and authenticates with a user name and password. Which combination of steps can the Engineer take to protect the credentials and minimize downtime when the credentials are rotated? (Choose two.)

• A) Have a Database Administrator encrypt the credentials and store the ciphertext in Amazon S3. Grant permission to the instance role associated with the EC2 instance to read the object and decrypt the ciphertext.
• B) Configure a scheduled job that updates the credential in AWS Systems Manager Parameter Store and notifies the Engineer that the application needs to be restarted.
• C) Configure automatic rotation of credentials in AWS Secrets Manager.
• D) Store the credential in an encrypted string parameter in AWS Systems Manager Parameter Store. Grant permission to the instance role associated with the EC2 instance to access the parameter and the AWS KMS key that is used to encrypt it.
• E) Configure the Java application to catch a connection failure and make a call to AWS Secrets Manager to retrieve updated credentials when the password is rotated. Grant permission to the instance role associated with the EC2 instance to access Secrets Manager.

Understand and apply the principles of crashing in project management to reduce completion time.

Calculate crash costs and determine the most cost-effective activities to crash in a project.

Distinguish between optimistic, most likely, and pessimistic time estimates in project scheduling.

Recognize the impact of time-cost tradeoffs on project scheduling and management.

---

Definitions:

Complaint Sections

Parts of a legal complaint document detailing the facts, legal basis, and specific demands for relief.

FRCP 26

Federal Rules of Civil Procedure 26, relating to the disclosure of evidence in the pre-trial discovery process.

Discovery

The pre-trial process in a lawsuit where each party can obtain evidence from the other party by means of discovery devices such as interrogatories, depositions, and document requests.

E-filing

The electronic submission of legal documents to a court's system, allowing for a more efficient and often faster process than traditional paper filings.