SAP-C02 Question 427
Select 4A company is hosting a critical web application on AWS that processes sensitive customer data. To meet compliance requirements, they must ensure that all data is encrypted at rest and in transit, and they want to monitor and automatically remediate potential security misconfigurations in their AWS environment. Which combination of AWS services could help the company meet these requirements?
- A
AWS Key Management Service (KMS)
- B
Amazon Macie
- C
AWS Config
- D
AWS Certificate Manager (ACM)
- E
Amazon GuardDuty
- F
AWS WAF (Web Application Firewall)
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To meet the requirements of encrypting data at rest and in transit, AWS Key Management Service (KMS) and AWS Certificate Manager (ACM) are essential for managing encryption keys and SSL/TLS certificates, respectively. Amazon Macie ensures sensitive data is properly classified and protected, which is critical for compliance. AWS Config helps identify and remediate misconfigurations that could lead to non-compliance. While Amazon GuardDuty and AWS WAF are valuable security tools, they do not directly address the specific requirements of encryption and compliance monitoring in this scenario.
- A. Correct.
AWS Key Management Service (KMS) provides managed encryption key services, which can be used to encrypt data at rest, fulfilling compliance requirements for sensitive data.
- B. Correct.
Amazon Macie automatically discovers, classifies, and protects sensitive data, helping to ensure compliance with data protection regulations.
- C. Correct.
AWS Config provides continual monitoring of AWS resources and detects misconfigurations, allowing the company to identify and remediate security issues automatically.
- D. Correct.
AWS Certificate Manager (ACM) simplifies the management of SSL/TLS certificates for encrypting data in transit, ensuring secure communication for the web application.
- E. Incorrect.
Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, but it does not directly address encryption or compliance monitoring.
- F. Incorrect.
AWS WAF helps protect web applications from common web exploits, but it does not provide encryption or monitor misconfigurations.