A Developer Who Is Following AWS Best Practices for Secure

question 280

Multiple Choice

A Developer who is following AWS best practices for secure code development requires an application to encrypt sensitive data to be stored at rest, locally in the application, using AWS KMS. What is the simplest and MOST secure way to decrypt this data when required?

• A) Request KMS to provide the stored unencrypted data key and then use the retrieved data key to decrypt the data.
• B) Keep the plaintext data key stored in Amazon DynamoDB protected with IAM policies. Query DynamoDB to retrieve the data key to decrypt the data
• C) Use the Encrypt API to store an encrypted version of the data key with another customer managed key. Decrypt the data key and use it to decrypt the data when required.
• D) Store the encrypted data key alongside the encrypted data. Use the Decrypt API to retrieve the data key to decrypt the data when required.

Comprehend the concept of normative and informational influence on individual and group behavior.

Identify the mechanisms of group polarization and its impact on decision-making.

Understand the concept and implications of groupthink in team dynamics.

Comprehend different approaches to organizational communication.

---

Definitions:

Current Assets

Resources anticipated to be turned into cash, disposed of, or used up either within one year or over the length of the business's operational cycle, depending on which period is greater.

Net Sales

Revenue from the sale of goods or services after deducting returns, allowances, and discounts.

Bank Reconciliation

The process of matching and comparing figures from accounting records against those displayed in a bank statement to ensure consistency.

Incorrectly Recorded

Refers to entries or transactions that have been recorded inaccurately in the accounting records, requiring correction.