A Company Plans to Migrate a Sensitive Dataset to Amazon

question 16

Multiple Choice

A company plans to migrate a sensitive dataset to Amazon S3. A Security Engineer must ensure that the data is encrypted at rest. The encryption solution must enable the company to generate its own keys without needing to manage key storage or the encryption process. What should the Security Engineer use to accomplish this?

• A) Server-side encryption with Amazon S3-managed keys (SSE-S3)
• B) Server-side encryption with AWS KMS-managed keys (SSE-KMS)
• C) Server-side encryption with customer-provided keys (SSE-C)
• D) Client-side encryption with an AWS KMS-managed CMK

---

Definitions:

Globalization

The growth and spread of investment, trade, production, communication, and new technology around the world.

Spread of Investment

The diversification of investments across different sectors, assets, or geographies to reduce risk and achieve a more stable return.

Production

The process of creating goods and services through the combination of labor, materials, and technology.

Communication

The process of transferring information, ideas, emotions, and intentions between individuals through verbal, non-verbal, written, or visual means.