A Security Engineer Is Looking for a Way to Control

question 119

Multiple Choice

A Security Engineer is looking for a way to control access to data that is being encrypted under a CMK. The Engineer is also looking to use additional authenticated data (AAD) to prevent tampering with ciphertext. Which action would provide the required functionality?

• A) Pass the key alias to AWS KMS when calling Encrypt and Decrypt API actions. Pass the key alias to AWS KMS when calling Encrypt and Decrypt API actions.
• B) Use IAM policies to restrict access to Encrypt and Decrypt API actions. Use IAM policies to restrict access to
• C) Use kms:EncryptionContext as a condition when defining IAM policies for the CMK. Use kms:EncryptionContext as a condition when defining IAM policies for the CMK.
• D) Use key policies to restrict access to the appropriate IAM groups.

---

Definitions:

Court

A governmental institution responsible for administering justice through interpreting laws, resolving disputes, and deciding criminal or civil cases.

Chapter 13

A type of bankruptcy in the United States that allows individuals earning a regular income to develop a plan to repay all or part of their debts.

Payment

The transfer of money, goods, or services from one party to another in exchange for something of value, completing a transaction.

Debtor's Obligations

The responsibilities or duties a borrower must fulfill, such as repaying borrowed money, according to agreed-upon terms.