A Company Has Developed a New Amazon RDS Database Application

question 171

Multiple Choice

A company has developed a new Amazon RDS database application. The company must secure the RDS database credentials for encryption in transit and encryption at rest. The company also must rotate the credentials automatically on a regular basis. Which solution meets these requirements?

• A) Use AWS Systems Manager Parameter Store to store the database credentials. Configure automatic rotation of the credentials.
• B) Use AWS Secrets Manager to store the database credentials. Configure automatic rotation of the credentials.
• C) Store the database credentials in an Amazon S3 bucket that is configured with server-side encryption with S3 managed encryption keys (SSE-S3). Rotate the credentials with IAM database authentication.
• D) Store the database credentials in Amazon S3 Glacier, and use S3 Glacier Vault Lock. Configure an AWS Lambda function to rotate credentials on a scheduled basis.

---

Definitions:

Cranial Cavity

The space within the skull that houses and protects the brain.

Dorsal Cavity

A hollow space within the body that includes the cranial and vertebral cavities, housing the brain and spinal cord.

Feedback Mechanism

A regulatory process in biological systems where the output or result influences the activity of the process itself, often maintaining homeostasis.

Negative

Often referring to a lack or absence of a specified substance, condition, or entity in various contexts, such as test results.