DEA-C01 · Question #191
A data engineer is launching an Amazon EMR cluster. The data that the data engineer needs to load into the new cluster is currently in an Amazon S3 bucket. The data engineer needs to ensure that data
Sign in or unlock DEA-C01 to reveal the answer and full explanation for question #191. The question stem and answer options stay visible for context.
Question
A data engineer is launching an Amazon EMR cluster. The data that the data engineer needs to load into the new cluster is currently in an Amazon S3 bucket. The data engineer needs to ensure that data is encrypted both at rest and in transit. The data that is in the S3 bucket is encrypted by an AWS Key Management Service (AWS KMS) key. The data engineer has an Amazon S3 path that has a Privacy Enhanced Mail (PEM) file. Which solution will meet these requirements?
Options
- ACreate an Amazon EMR security configuration. Specify the appropriate AWS KMS key for at-rest
- BCreate an Amazon EMR security configuration. Specify the appropriate AWS KMS key for local
- CCreate an Amazon EMR security configuration. Specify the appropriate AWS KMS key for at-rest
- DCreate an Amazon EMR security configuration. Specify the appropriate AWS KMS key for at-rest
Unlock DEA-C01 to see the answer
You've previewed enough free DEA-C01 questions. Unlock DEA-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.