A Company Wants to Migrate a Workload to AWS

question 458

Multiple Choice

A company wants to migrate a workload to AWS. The chief information security officer requires that all data be encrypted at rest when stored in the cloud. The company wants complete control of encryption key lifecycle management. The company must be able to immediately remove the key material and audit key usage independently of AWS CloudTrail. The chosen services should integrate with other storage services that will be used on AWS. Which services satisfies these security requirements?

• A) AWS CloudHSM with the CloudHSM client
• B) AWS Key Management Service (AWS KMS) with AWS CloudHSM
• C) AWS Key Management Service (AWS KMS) with an external key material origin
• D) AWS Key Management Service (AWS KMS) with AWS managed customer master keys (CMKs)

---

Definitions:

Human Sustainability

Practices and strategies aimed at promoting the long-term well-being and development of people within a society or organization.

Types of Innovation

Categorizations of innovation based on characteristics such as product versus process, radical versus incremental, and disruptive versus sustaining.

Letter of the Law

Refers to the precise wording and literal interpretation of legal documents and statutes, without considering the broader context or intent behind them.

Office Pens

Writing instruments specifically designated or commonly used within office settings or for professional tasks.