Question #894

试题更新时间: 2023-11-07 12:59:45

You are setting up a video streaming service with the main components of the set up being S3, CloudFront and Transcoder. Your video content will be stored on AWS S3, and your first job is to upload 10 videos to S3 and make sure they are secure before you even begin to start thinking of streaming the videos. The 10 videos have just finished uploading to S3, so you now need to secure them with encryption at rest. Which of the following would be the best way to do this? Choose the correct answer:

A. Use AWS CloudHSM appliance with both physical and logical tamper detection and response mechanisms that trigger zeroization of the appliance.

B. Set an API flag, or check a box in the AWS Management Console, to have data encrypted in Amazon S3.

C. Use KMS to decrypt source data and encrypt resulting output. Also, use Origin Access Identity on your CloudFront distribution, so content is only able to be served via CloudFront, not S3 URLs.

D. Encrypt your data using AES-256. After the object is encrypted, the encryption key you used needs to be stored on AWS CloudFront.

上一题收藏列表练习记录

下一题点击收藏

问题反馈