KMS KMS

Quiz
•
Computers
•
Professional Development
•
Medium
Tú Nguyễn
Used 4+ times
FREE Resource
7 questions
Show all answers
1.
MULTIPLE CHOICE QUESTION
1 min • 5 pts
A social photo-sharing company uses Amazon S3 to store the images uploaded by the users. These images are kept encrypted in S3 by using AWS-KMS and the company manages its own Customer Master Key (CMK) for encryption. A member of the DevOps team accidentally deleted the CMK a day ago, thereby rendering the user's photo data unrecoverable. You have been contacted by the company to consult them on possible solutions to this crisis.
As a solutions architect, which of the following steps would you recommend to solve this issue?
As the CMK was deleted a day ago, it must be in the 'pending deletion' status and hence you can just cancel the CMK deletion and recover the key
Contact AWS support to retrieve the CMK from their backup
The CMK can be recovered by the AWS root account user
The company should issue a notification on its web application informing the users about the loss of their data
2.
MULTIPLE CHOICE QUESTION
1 min • 5 pts
A retail company wants to share sensitive accounting data that is stored in an Amazon RDS DB instance with an external auditor. The auditor has its own AWS account and needs its own copy of the database.
Which of the following would you recommend to securely share the database with the auditor?
Create an encrypted snapshot of the database, share the snapshot, and allow access to the AWS Key Management Service (AWS KMS) encryption key
Create a snapshot of the database in Amazon S3 and assign an IAM role to the auditor to grant access to the object in that bucket
Export the database contents to text files, store the files in Amazon S3, and create a new IAM user for the auditor with access to that bucket
Set up a read replica of the database and configure IAM standard database authentication to grant the auditor access
3.
MULTIPLE SELECT QUESTION
1 min • 5 pts
The engineering team at a social media company has recently migrated to AWS Cloud from its on-premises data center. The team is evaluating CloudFront to be used as a CDN for its flagship application. The team has hired you as an AWS Certified Solutions Architect Associate to advise on CloudFront capabilities on routing, security, and high availability.
Which of the following would you identify as correct regarding CloudFront? (Select three)
CloudFront can route to multiple origins based on the content type
Use an origin group with primary and secondary origins to configure CloudFront for high availability and failover
Use field level encryption in CloudFront to protect sensitive data for specific content
Use geo restriction to configure CloudFront for high-availability and failover
Use KMS encryption in CloudFront to protect sensitive data for specific content
4.
MULTIPLE CHOICE QUESTION
30 sec • 5 pts
To enable In-flight Encryption (In-Transit Encryption), we need to have ........................
an HTTP endpoint with an SSL certificate
an HTTPS endpoint with an SSL certificate
a TCP endpoint
Answer explanation
In-flight Encryption = HTTPS, and HTTPS can not be enabled without an SSL certificate.
5.
MULTIPLE CHOICE QUESTION
30 sec • 5 pts
Server-Side Encryption means that the data is sent encrypted to the server
True
False
Answer explanation
Server-Side Encryption means the server will encrypt the data for us. We don't need to encrypt it beforehand
6.
MULTIPLE CHOICE QUESTION
30 sec • 5 pts
In Server-Side Encryption, where do the encryption and decryption happen?
Both Encryption and Decryption happen on the server
Both Encryption and Decryption happen on the client
Encryption happens on the server and Decryption happens on the client
7.
MULTIPLE CHOICE QUESTION
30 sec • 5 pts
In Client-Side Encryption, the server must know our encryption scheme before we can upload the data
True
False
Answer explanation
With Client-Side Encryption, the server doesn't need to know any information about the encryption scheme being used, as the server will not perform any encryption or decryption operations.
Similar Resources on Wayground
10 questions
Exam Prep 1

Quiz
•
Professional Development
8 questions
AWS Architect Class 8

Quiz
•
Professional Development
10 questions
Exam Prep 2

Quiz
•
Professional Development
10 questions
Is Your AWS Cloud Well Architected

Quiz
•
Professional Development
10 questions
Semana 3

Quiz
•
Professional Development
10 questions
Semana 2 - Quizz

Quiz
•
Professional Development
9 questions
The Importance of Monitoring

Quiz
•
Professional Development
10 questions
SAA-C03 - Módulo 7

Quiz
•
Professional Development
Popular Resources on Wayground
11 questions
Hallway & Bathroom Expectations

Quiz
•
6th - 8th Grade
20 questions
PBIS-HGMS

Quiz
•
6th - 8th Grade
10 questions
"LAST STOP ON MARKET STREET" Vocabulary Quiz

Quiz
•
3rd Grade
19 questions
Fractions to Decimals and Decimals to Fractions

Quiz
•
6th Grade
16 questions
Logic and Venn Diagrams

Quiz
•
12th Grade
15 questions
Compare and Order Decimals

Quiz
•
4th - 5th Grade
20 questions
Simplifying Fractions

Quiz
•
6th Grade
20 questions
Multiplication facts 1-12

Quiz
•
2nd - 3rd Grade