CLF-C02 Question 96
Select 3Your company is planning to use Amazon S3 to store sensitive financial data and must comply with strict regulatory requirements, including data encryption at rest and specific audit controls. Which AWS feature(s) or service(s) would best help you meet these compliance requirements?
- A
Amazon S3 default encryption
- B
AWS CloudTrail
- C
AWS Trusted Advisor
- D
Amazon S3 Transfer Acceleration
- E
Amazon S3 Bucket Policies
Show answer and explanation
Correct answers: A, B, E
Explanation
Meeting compliance requirements for sensitive financial data often involves ensuring encryption at rest, controlling access, and maintaining audit logs for monitoring. Amazon S3 default encryption automatically encrypts data at rest, AWS CloudTrail provides detailed logging for auditing purposes, and S3 Bucket Policies enable fine-grained access management to enforce compliance rules. These features together help address the specified regulatory requirements, while the other options are not directly relevant to compliance in this scenario.
- A. Correct.
Amazon S3 default encryption ensures that all data stored in a bucket is automatically encrypted at rest, helping meet compliance requirements related to data protection.
- B. Correct.
AWS CloudTrail enables logging and monitoring of API calls, which can help in meeting audit control requirements and maintaining compliance.
- C. Incorrect.
AWS Trusted Advisor provides recommendations for optimizing costs, security, and performance but does not directly address compliance requirements for data encryption or audit controls.
- D. Incorrect.
Amazon S3 Transfer Acceleration is used to speed up data transfers to S3 but does not address compliance requirements related to encryption or audit controls.
- E. Correct.
Amazon S3 Bucket Policies allow you to define fine-grained access controls to ensure compliance with data access policies.