A company is using an AWS Transfer Family server to migrate data from an on-premises environment to AWS. Company policy mandates the use of TLS 1.2 or above to encrypt the data in transit. Which…

Question

Options

• AGenerate new SSH keys for the Transfer Family server. Make the old keys and the new keys
• BUpdate the security group rules for the on-premises network to allow only connections that use
• CUpdate the security policy of the Transfer Family server to specify a minimum protocol version of
• DInstall an SSL certificate on the Transfer Family server to encrypt data transfers by using TLS 1.2.

• A
  11% (2)
• B
  6% (1)
• C
  83% (15)

Explanation

AWS Transfer Family supports configurable security policies that define which TLS protocol versions and cipher suites are allowed for FTPS/HTTPS connections. Updating the server's security policy to enforce a minimum of TLS 1.2 is the direct, purpose-built mechanism for this requirement. Option A (SSH key rotation) applies to SFTP, which uses SSH-not TLS-and is unrelated to TLS version enforcement. Option B (security group rules) operate at the network layer (IP/port) and cannot inspect or filter by TLS version. Option D is incorrect because AWS Transfer Family manages its own TLS certificates via ACM; you do not install certificates manually to control protocol version.

No community discussion yet for this question.