An Advisory Firm Is Creating a Secure Data Analytics Solution

question 114

Multiple Choice

An advisory firm is creating a secure data analytics solution for its regulated financial services users. Users will upload their raw data to an Amazon S3 bucket, where they have PutObject permissions only. Data will be analyzed by applications running on an Amazon EMR cluster launched in a VPC. The firm requires that the environment be isolated from the internet. All data at rest must be encrypted using keys controlled by the firm. Which combination of actions should the Solutions Architect take to meet the user's security requirements? (Choose two.)

• A) Launch the Amazon EMR cluster in a private subnet configured to use an AWS KMS CMK for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for AWS KMS.
• B) Launch the Amazon EMR cluster in a private subnet configured to use an AWS KMS CMK for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and a NAT gateway to access AWS KMS.
• C) Launch the Amazon EMR cluster in a private subnet configured to use an AWS CloudHSM appliance for at-rest encryption. Configure a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for CloudHSM.
• D) Configure the S3 endpoint policies to permit access to the necessary data buckets only.
• E) Configure the S3 bucket policies to permit access using an aws:sourceVpce condition to match the S3 endpoint ID.

---

Definitions:

Escalating commitment

A decision-making process where individuals or organizations continue to invest in a failing course of action due to the significant resources already spent.

Non-programmed Decision-Making

The process of making decisions in unpredictable and unique situations, requiring creative and critical thinking beyond routine procedures.

Satisficing

A decision-making strategy that aims for a satisfactory or adequate result, rather than the optimal solution, due to constraints.

Consultative decisions

a process where decision-making is shared among group members, often leading to consensus.