CLF-C02 Question 90
Select 3A company is building a web application that processes sensitive customer data. They need to ensure that data is protected when it is stored in Amazon S3 and when it is transmitted between the application and S3 over the network. Which of the following options should they use to meet these requirements?
- A
Enable server-side encryption for the Amazon S3 bucket to encrypt data at rest.
- B
Use AWS Key Management Service (KMS) to manage encryption keys for Amazon S3.
- C
Enable S3 Transfer Acceleration to secure data during transit.
- D
Use SSL/TLS to secure data in transit between the application and Amazon S3.
Show answer and explanation
Correct answers: A, B, D
Explanation
To protect sensitive customer data, the company must implement encryption both at rest and in transit. Enabling server-side encryption and using AWS KMS ensures data is secure while stored in Amazon S3. Using SSL/TLS ensures data is encrypted while being transmitted between the application and S3. S3 Transfer Acceleration enhances transfer speed but does not guarantee encryption during transit.
- A. Correct.
Correct. Enabling server-side encryption ensures that data stored in Amazon S3 is encrypted at rest, which protects sensitive data.
- B. Correct.
Correct. AWS Key Management Service (KMS) allows you to manage encryption keys for server-side encryption in Amazon S3, adding an extra layer of control and security.
- C. Incorrect.
Incorrect. S3 Transfer Acceleration improves transfer speeds but does not specifically provide encryption or protection for data in transit.
- D. Correct.
Correct. Using SSL/TLS ensures that data is encrypted while in transit between the application and Amazon S3, protecting it during transmission over the network.