A Company Is Developing a Highly Resilient Application to Be

question 177

Multiple Choice

A company is developing a highly resilient application to be hosted on multiple Amazon EC2 instances. The application will store highly sensitive user data in Amazon RDS tables. The application must: Include migration to a different AWS Region in the application disaster recovery plan. Provide a full audit trail of encryption key administration events. Allow only company administrators to administer keys. Protect data at rest using application layer encryption. A Security Engineer is evaluating options for encryption key management. Why should the Security Engineer choose AWS CloudHSM over AWS KMS for encryption key management in this situation?

• A) The key administration event logging generated by CloudHSM is significantly more extensive than AWS KMS.
• B) CloudHSM ensures that only company support staff can administer encryption keys, whereas AWS KMS allows AWS staff to administer keys.
• C) The ciphertext produced by CloudHSM provides more robust protection against brute force decryption attacks than the ciphertext produced by AWS KMS.
• D) CloudHSM provides the ability to copy keys to a different Region, whereas AWS KMS does not.

---

Definitions:

Wealth of Nations

A seminal work by economist Adam Smith published in 1776, which lays out the foundational concepts of classical economics, including the division of labor and free market principles.

John Locke

A 17th-century English philosopher known for his contributions to liberalism, political theory, and his theories of mind and consciousness.

Abolition

The movement to end slavery and the slave trade, which gained momentum in the 19th century and led to the emancipation of slaves, especially in the Western world.

Indian Tribes

Indigenous communities recognized as sovereign entities with their own governance and cultural traditions within the United States.