A Company Has Two Software Development Teams That Are Creating

question 278

Multiple Choice

A company has two software development teams that are creating applications that store sensitive data in Amazon S3. Each team's data must always be separate. The company's security team must design a data encryption strategy for both teams that provides the ability to audit key usage. The solution must also minimize operational overhead. What should the security team recommend?

• A) Tell the application teams to use two different S3 buckets with separate AWS Key Management Service (AWS KMS) AWS managed CMKs. Limit the key policies to allow encryption and decryption of the CMKs to their respective teams only. Force the teams to use encryption context to encrypt and decrypt.
• B) Tell the application teams to use two different S3 buckets with a single AWS Key Management Service (AWS KMS) AWS managed CMK. Limit the key policy to allow encryption and decryption of the CMK only. Do not allow the teams to use encryption context to encrypt and decrypt.
• C) Tell the application teams to use two different S3 buckets with separate AWS Key Management Service (AWS KMS) customer managed CMKs. Limit the key policies to allow encryption and decryption of the CMKs to their respective teams only. Force the teams to use encryption context to encrypt and decrypt.
• D) Tell the application teams to use two different S3 buckets with a single AWS Key Management Service (AWS KMS) customer managed CMK. Limit the key policy to allow encryption and decryption of the CMK only. Do not allow the teams to use encryption context to encrypt and decrypt.

---

Definitions:

Development Programs

Structured initiatives within organizations aimed at enhancing the skills and competencies of employees for their personal and professional growth.

Manufacture Products

The process of converting raw materials, components, or parts into finished goods that meet a customer's expectations or specifications.

Effective Teamwork

The combined effort of a group of individuals working together efficiently to achieve a common goal.

Performance Management

The systematic process by which a company involves its employees in achieving organizational goals through planning, monitoring, and reviewing employee performance.