A Security Engineer Is Looking for a Way to Control

question 119

Multiple Choice

A Security Engineer is looking for a way to control access to data that is being encrypted under a CMK. The Engineer is also looking to use additional authenticated data (AAD) to prevent tampering with ciphertext. Which action would provide the required functionality?

• A) Pass the key alias to AWS KMS when calling Encrypt and Decrypt API actions. Pass the key alias to AWS KMS when calling Encrypt and Decrypt API actions.
• B) Use IAM policies to restrict access to Encrypt and Decrypt API actions. Use IAM policies to restrict access to
• C) Use kms:EncryptionContext as a condition when defining IAM policies for the CMK. Use kms:EncryptionContext as a condition when defining IAM policies for the CMK.
• D) Use key policies to restrict access to the appropriate IAM groups.

---

Definitions:

A Horizon

The A Horizon refers to the top layer of soil rich in organic matter and minerals, essential for plant growth.

O Horizon

The uppermost layer of soil, rich in organic material, such as decomposed leaves and plants, contributing to soil fertility and health.

C Horizon

The layer of soil beneath the B horizon, composed of larger unweathered rocks and mineral particles, and is less affected by the soil-forming processes.

Vascular Plants

A large group of plants that possess vascular tissues (xylem and phloem) for the transport of water, nutrients, and sugars throughout the plant.