A Company Is Preparing to Deploy a Data Lake on AWS

question 300

Multiple Choice

A company is preparing to deploy a data lake on AWS. A solutions architect must define the encryption strategy tor data at rest m Amazon S3/ The company's security policy states: Keys must be rotated every 90 days. Strict separation of duties between key users and key administrators must be implemented. Auditing key usage must be possible. What should the solutions architect recommend?

• A) Server-side encryption with AWS KMS managed keys (SSE-KMS) with customer managed customer master keys (CMKs)
• B) Server-side encryption with AWS KMS managed keys (SSE-KMS) with AWS managed customer master keys (CMKs)
• C) Server-side encryption with Amazon S3 managed keys (SSE-S3) with customer managed customer master keys (CMKs)
• D) Server-side encryption with Amazon S3 managed keys (SSE-S3) with AWS managed customer master keys (CMKs)

---

Definitions:

International Quality Standards

Guidelines and specifications set by international bodies to ensure products, services, and systems are safe, reliable, and of good quality.

Operations

the day-to-day activities required for a business to function effectively, including production, supply chain, and service delivery.

Continuous Improvement

Continuous improvement is an ongoing effort to enhance products, services, or processes through incremental improvements over time or breakthrough improvements all at once.

Total Quality Management

A management approach focused on continuous improvement of processes, products, and services by involving all members of an organization.