A Security Engineer Has Discovered That, Although Encryption Was Enabled

question 43

Multiple Choice

A Security Engineer has discovered that, although encryption was enabled on the Amazon S3 bucket examplebucket, anyone who has access to the bucket has the ability to retrieve the files. The Engineer wants to limit access to each IAM user can access an assigned folder only. What should the Security Engineer do to achieve this?

• A) Use envelope encryption with the AWS-managed CMK aws/s3.
• B) Create a customer-managed CMK with a key policy granting "kms:Decrypt" based on the "${aws:username}" variable.
• C) Create a customer-managed CMK for each user. Add each user as a key user in their corresponding key policy.
• D) Change the applicable IAM policy to grant S3 access to "Resource": "arn:aws:s3:::examplebucket/${aws:username}/*"

Identify enforceability factors of contract modifications discussed through instant messaging.

Apply the doctrine of commercial impracticability to situations where supervening events impact contract performance.

Recognize the types and enforceability of nondisclosure agreements (NDAs) in protecting proprietary information.

Analyze the role and structure of nondisclosure agreements in joint ventures and their impact on confidentiality.

---

Definitions:

Cancer

A group of diseases involving abnormal cell growth with the potential to invade or spread to other parts of the body.

Mcg

Microgram, a unit of measure equal to one millionth of a gram or one thousandth of a milligram.

mL

Milliliter, a unit of volume in the metric system equal to one-thousandth of a liter.

Root Word

The basic part of a word from which derivations and inflections are formed.