DBS-C01 · Question #167
A financial services company uses Amazon RDS for Oracle with Transparent Data Encryption (TDE). The company is required to encrypt its data at rest at all times. The key required to decrypt the data h
Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #167. The question stem and answer options stay visible for context.
Question
A financial services company uses Amazon RDS for Oracle with Transparent Data Encryption (TDE). The company is required to encrypt its data at rest at all times. The key required to decrypt the data has to be highly available, and access to the key must be limited. As a regulatory requirement, the company must have the ability to rotate the encryption key on demand. The company must be able to make the key unusable if any potential security breaches are spotted. The company also needs to accomplish these tasks with minimum overhead. What should the database administrator use to set up the encryption to meet these requirements?
Options
- AAWS CloudHSM
- BAWS Key Management Service (AWS KMS) with an AWS managed key
- CAWS Key Management Service (AWS KMS) with server-side encryption
- DAWS Key Management Service (AWS KMS) CMK with customer-provided material
Unlock DBS-C01 to see the answer
You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.