A Company Has Recently Updated Its Internal Security Standards

question 449

Multiple Choice

A company has recently updated its internal security standards. The company must now ensure all Amazon S3 buckets and Amazon Elastic Block Store (Amazon EBS) volumes are encrypted with keys created and periodically rotated by internal security specialists. The company is looking for a native, software-based AWS service to accomplish this goal.   What should a solutions architect recommend as a solution?

• A) Use AWS Secrets Manager with customer master keys (CMKs) to store master key material and apply a routine to create a new CMK periodically and replace it in AWS Secrets Manager.
• B) Use AWS Key Management Service (AWS KMS) with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in AWS KMS.
• C) Use an AWS CloudHSM cluster with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the CloudHSM cluster nodes.
• D) Use AWS Systems Manager Parameter Store with customer master keys (CMKs) to store master key material and apply a routine to re-create a new key periodically and replace it in the Parameter Store.

---

Definitions:

Exhaustive Reconstruction

A detailed and comprehensive method of attempting to recreate or rebuild information or an event from memory in its entirety.

Becomes More Distorted

Refers to the process by which information, images, or perceptions are altered or twisted from their original form, becoming less accurate over time or through transmission.

Retelling Of Stories

The act of narrating or recounting the plot, characters, and events of a story after reading or hearing it, often to assess comprehension.

Native American

A member of any of the indigenous peoples of the Americas.