Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 580 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 580
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company is building an ecommerce application and needs to store sensitive customer information. The company needs to give customers the ability to complete purchase transactions on the website. The company also needs to ensure that sensitive customer data is protected, even from database administrators.
Which solution meets these requirements?

A. Store sensitive data in an Amazon Elastic Block Store (Amazon EBS) volume. Use EBS encryption to encrypt the data. Use an IAM instance role to restrict access.
B. Store sensitive data in Amazon RDS for MySQL. Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data.
C. Store sensitive data in Amazon S3. Use AWS Key Management Service (AWS KMS) server-side encryption to encrypt the data. Use S3 bucket policies to restrict access.
D. Store sensitive data in Amazon FSx for Windows Server. Mount the file share on application servers. Use Windows file permissions to restrict access.

Show Suggested Answer

Suggested Answer: B 🗳️

by Curious76 at Sept. 7, 2022, 12:53 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

BECAUSE

1 year, 11 months ago

Selected Answer: B

B is the answer

upvoted 1 times

...

jw1806

2 years, 7 months ago

Selected Answer: C

" ensure that sensitive customer data is protected, even from database administrators." , i think s3 is a good choice.

upvoted 2 times

...

nymets

2 years, 8 months ago

Selected Answer: B

Use client-side encryption to ensure that DB admins cannot decrypt the data.

upvoted 4 times

...

Curious76

2 years, 8 months ago

Selected Answer: C

Server-side encryption is the encryption of data at its destination by the application or service that receives it. https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html