An Advisory Firm Is Creating a Secure Data Analytics Solution

question 114

Multiple Choice

An advisory firm is creating a secure data analytics solution for its regulated financial services users. Users will upload their raw data to an Amazon S3 bucket, where they have PutObject permissions only. Data will be analyzed by applications running on an Amazon EMR cluster launched in a VPC. The firm requires that the environment be isolated from the internet. All data at rest must be encrypted using keys controlled by the firm. Which combination of actions should the Solutions Architect take to meet the user's security requirements? (Choose two.)

• A) Launch the Amazon EMR cluster in a private subnet configured to use an AWS KMS CMK for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for AWS KMS.
• B) Launch the Amazon EMR cluster in a private subnet configured to use an AWS KMS CMK for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and a NAT gateway to access AWS KMS.
• C) Launch the Amazon EMR cluster in a private subnet configured to use an AWS CloudHSM appliance for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for CloudHSM.
• D) Configure the S3 endpoint policies to permit access to the necessary data buckets only.
• E) Configure the S3 bucket policies to permit access using an aws:sourceVpce condition to match the S3 endpoint ID.

---

Definitions:

Bad Debts Expense

Bad debts expense represents the portion of receivables that a company estimates it will not be able to collect.

Allowance for Doubtful Accounts

An accounting provision made by companies to account for potential future bad debts, reflecting credit sales that might not be collected.

Write Off

The accounting action of declaring that an asset is no longer useful and recording its depreciation in the financial statements.

Expense Recognition Principle

An accounting principle that matches expenses with the revenues they helped to generate, recognizing expenses in the same period as the revenues.