A Company's Security Team Wants to Track Data Encryption Events

question 187

Multiple Choice

A company's Security team wants to track data encryption events across all company AWS accounts. The team wants to capture all AWS KMS events related to deleting or rotating customer master keys (CMKs) from all production AWS accounts. The KMS events will be sent to the Security team's AWS account for monitoring. How can this be accomplished?

• A) Create an AWS Lambda function that will run every few minutes in each production account, parse the KMS log for KMS events, and sent the information to an Amazon SQS queue managed by the Security team.
• B) Create an event bus in the Security team's account, create a new Amazon CloudWatch Events rule that matches the KMS events in each production account, and then add the Security team's event bus as the target.
• C) Set up AWS CloudTrail for KMS events in every production account, and have the logs sent to an Amazon S3 bucket that is managed by the Security team.
• D) Create an AWS Config rule that checks for KMS keys that are in a pending deletion or rotated state in every production account, then send Amazon SNS notifications of any non-compliant KMS resources to the Security team.

Understand the legislation and court rulings regarding immigration and their impacts.

Grasp the significance of the Americans with Disabilities Act of 1990.

Analyze the efforts and challenges in achieving gender equality in education and the workplace.

Understand the constitutional basis and implications of the right to privacy, including relevant Supreme Court cases.

---

Definitions:

Voting Shares

Shares that give the shareholder the right to vote on matters of corporate policy and the composition of the members of the board of directors.

Investement Account

An account held at a financial institution that contains securities, cash, and other assets that an individual or entity is investing in.

Debt Investments

Investments in bonds or other debt instruments where the investor lends money to an entity in exchange for interest payments and the return of principal at maturity.

Available-For-Sale

A classification for financial assets indicating they are neither held for trading purposes nor intended to be held to maturity, and therefore can be sold.