An Organization Has a Multi-Petabyte Workload That It Is Moving

question 176

Multiple Choice

An organization has a multi-petabyte workload that it is moving to Amazon S3, but the CISO is concerned about cryptographic wear-out and the blast radius if a key is compromised. How can the CISO be assured that AWS KMS and Amazon S3 are addressing the concerns? (Choose two.)

• A) There is no API operation to retrieve an S3 object in its encrypted form.
• B) Encryption of S3 objects is performed within the secure boundary of the KMS service.
• C) S3 uses KMS to generate a unique data key for each individual object.
• D) Using a single master key to encrypt all data includes having a single place to perform audits and usage validation.
• E) The KMS encryption envelope digitally signs the master key during encryption to prevent cryptographic wear-out.

---

Definitions:

Profit-Maximizing

The process or strategy employed by a firm to adjust its production and prices to achieve the highest possible profit.

Price Elasticity

A quantitative representation of how quantity demanded or supplied of a product changes in response to a price change, signifying the sensitivity of consumers or producers to price variations.

Marginal Cost

The incremental cost of creating one more unit of a good or service.

Profit-Maximizing

Profit-maximizing refers to the strategy or point where a company achieves the highest possible profit from its operations, after accounting for all costs.