SAP-C02 Question 50
Select 3A company is migrating its on-premises data analytics platform to AWS. The platform processes large volumes of data daily and requires low-latency access to data during processing. The company's compliance requirements also mandate that all data must remain encrypted at rest and in transit. Which combination of AWS services and features should you recommend to meet these requirements?
- A
Amazon S3 with server-side encryption (SSE) and S3 Transfer Acceleration
- B
Amazon Redshift with encryption enabled and Amazon Redshift Spectrum for querying data in S3
- C
Amazon EMR with HDFS encryption and AWS Key Management Service (KMS)
- D
Amazon RDS with Multi-AZ deployment and encryption enabled
- E
AWS Glue for data transformation and Amazon S3 for storage with default bucket encryption
Show answer and explanation
Correct answers: B, C, E
Explanation
To meet the requirements of low-latency data processing and encryption at rest and in transit, the best combination of services includes Amazon Redshift with encryption for querying large datasets, Amazon EMR for scalable and fast data processing with HDFS encryption, and AWS Glue for data transformation with encrypted storage in S3. These services collectively fulfill the compliance and performance needs of the analytics platform while leveraging AWS's managed services for scalability and security.
- A. Incorrect.
Amazon S3 with server-side encryption and S3 Transfer Acceleration provides encrypted storage and faster data transfer, but it does not offer the low-latency data processing capabilities required for the scenario.
- B. Correct.
Amazon Redshift with encryption enabled and Amazon Redshift Spectrum supports querying large datasets stored in S3 and provides encryption at rest and in transit, making it suitable for low-latency data analytics.
- C. Correct.
Amazon EMR with HDFS encryption and AWS Key Management Service (KMS) ensures low-latency processing with encryption, fulfilling both the performance and compliance requirements.
- D. Incorrect.
Amazon RDS with Multi-AZ and encryption is suitable for relational database workloads but is not designed for large-scale data analytics or low-latency processing.
- E. Correct.
AWS Glue for data transformation and Amazon S3 with default bucket encryption provide a managed ETL service and encrypted storage, aligning with the compliance requirements for encrypted data at rest and in transit.