A Company Needs to Encrypt All of Its Data Stored

question 221

Multiple Choice

A company needs to encrypt all of its data stored in Amazon S3. The company wants to use AWS Key Management Service (AWS KMS) to create and manage its encryption keys. The company's security policies require the ability to import the company's own key material for the keys, set an expiration date on the keys, and delete keys immediately, if needed. How should a security engineer set up AWS KMS to meet these requirements?

• A) Configure AWS KMS and use a custom key store. Create a customer managed CMK with no key material. Import the company's keys and key material into the CMK.
• B) Configure AWS KMS and use the default key store. Create an AWS managed CMK with no key material. Import the company's keys and key material into the CMK.
• C) Configure AWS KMS and use the default key store. Create a customer managed CMK with no key material. Import the company's keys and key material into the CMK.
• D) Configure AWS KMS and use a custom key store. Create an AWS managed CMK with no key material. Import the company's keys and key material into the CMK.

---

Definitions:

Internal Rate Of Return

A measure of an investment's rate of return, calculated by finding the interest rate that makes the present value of cash inflows equal to the present value of cash outflows.

Required Rate

The minimum rate of return on an investment that a investor deems necessary to justify the risk of the investment.

Financial Break-even

The juncture where the total expenses match the total income, resulting in no gain or loss.

Sales Level

The quantity or volume of products or services sold or targeted to be sold within a specific period.