An Organization Has a System in AWS That Allows a Large

question 263

Multiple Choice

An organization has a system in AWS that allows a large number of remote workers to submit data files. File sizes vary from a few kilobytes to several megabytes. A recent audit highlighted a concern that data files are not encrypted while in transit over untrusted networks. Which solution would remediate the audit finding while minimizing the effort required?

• A) Upload an SSL certificate to IAM, and configure Amazon CloudFront with the passphrase for the private key.
• B) Call KMS.Encrypt() in the client, passing in the data file contents, and call KMS.Decrypt() server-side. Call KMS.Encrypt() in the client, passing in the data file contents, and call KMS.Decrypt() server-side.
• C) Use AWS Certificate Manager to provision a certificate on an Elastic Load Balancing in front of the web service's servers.
• D) Create a new VPC with an Amazon VPC VPN endpoint, and update the web service's DNS record.

---

Definitions:

Spending Variance

The difference between the actual amount of money spent and the budgeted amount in a given period.

Occupancy Costs

Expenses related to occupying a space, including rent, utilities, and other facility-related costs.

Spending Variance

The difference between the actual spending and the budgeted or planned spending in a given period.

Revenue Variance

The difference between the actual revenue earned and the expected revenue according to budget.