A Company Is Building a Data Lake on Amazon S3

question 135

Multiple Choice

A company is building a data lake on Amazon S3. The data consists of millions of small files containing sensitive information. The Security team has the following requirements for the architecture: • Data must be encrypted in transit. • Data must be encrypted at rest. • The bucket must be private, but if the bucket is accidentally made public, the data must remain confidential. Which combination of steps would meet the requirements? (Choose two.)

• A) Enable AES-256 encryption using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) on the S3 bucket.
• B) Enable default encryption with server-side encryption with AWS KMS-managed keys (SSE-KMS) on the S3 bucket.
• C) Add a bucket policy that includes a deny if a PutObject request does not include aws:SecureTransport . Add a bucket policy that includes a deny if a PutObject request does not include aws:SecureTransport .
• D) Add a bucket policy with aws:SourceIp to Allow uploads and downloads from the corporate intranet only. Add a bucket policy with aws:SourceIp to Allow uploads and downloads from the corporate intranet only.
• E) Add a bucket policy that includes a deny if a PutObject request does not include s3:x-amz-server-side-encryption: "aws:kms" . request does not include s3:x-amz-server-side-encryption: "aws:kms"
• F) Enable Amazon Macie to monitor and act on changes to the data lake's S3 bucket.

---

Definitions:

Dendrites

Extensions of a neuron that receive signals from other neurons and transmit them towards the cell body.

Neurons

Nerve cells that are the basic building blocks of the nervous system, responsible for transmitting information throughout the body.

Dendrite

The branched projections of a neuron that receive electrochemical stimulation from other neural cells, leading to the generation of a nerve impulse in the neuron.

Neighboring Neurons

Neurons located close to each other, facilitating quicker and more efficient neuronal communication.