Due to New Compliance Requirements, a Security Engineer Must Enable

question 205

Multiple Choice

Due to new compliance requirements, a Security Engineer must enable encryption with customer-provided keys on corporate data that is stored in DynamoDB. The company wants to retain full control of the encryption keys. Which DynamoDB feature should the Engineer use to achieve compliance'?

• A) Use AWS Certificate Manager to request a certificate. Use that certificate to encrypt data prior to uploading it to DynamoDB.
• B) Enable S3 server-side encryption with the customer-provided keys. Upload the data to Amazon S3, and then use S3Copy to move all data to DynamoDB
• C) Create a KMS master key. Generate per-record data keys and use them to encrypt data prior to uploading it to DynamoDS. Dispose of the cleartext and encrypted data keys after encryption without storing.
• D) Use the DynamoDB Java encryption client to encrypt data prior to uploading it to DynamoDB.

---

Definitions:

Performance Review

A formal assessment in which the work performance of an employee is documented and evaluated, often leading to recommendations for improvement or promotions.

Management Styles

The various approaches or methods a leader or manager uses to interact with employees and direct their activities toward achieving organizational goals.

Organizational Psychology

An I/O psychology subfield that examines organizational influences on worker satisfaction and productivity and facilitates organizational change.

Motivation

The mechanism that starts, directs, and sustains behaviors aimed at achieving goals.