SAA-C03 · Question #511
A company uses Amazon EC2 instances behind an Application Load Balancer (ALB) to serve content to users. The company uses Amazon Elastic Block Store (Amazon EBS) volumes to store data. The company nee
The correct answer is C. AWS Certificate Manager (ACM) E. AWS Key Management Service (AWS KMS). To secure data in transit, the company should use AWS Certificate Manager (ACM) to provide SSL/TLS certificates for the Application Load Balancer. ACM allows easy provisioning, management, and renewal of public and private certificates, ensuring secure communication between users
Question
A company uses Amazon EC2 instances behind an Application Load Balancer (ALB) to serve content to users. The company uses Amazon Elastic Block Store (Amazon EBS) volumes to store data. The company needs to encrypt data in transit and at rest. Which combination of services will meet these requirements? (Select TWO.)
Options
- AAmazon GuardDuty
- BAWS Shield
- CAWS Certificate Manager (ACM)
- DAWS Secrets Manager
- EAWS Key Management Service (AWS KMS)
How the community answered
(25 responses)- B8% (2)
- C88% (22)
- D4% (1)
Explanation
To secure data in transit, the company should use AWS Certificate Manager (ACM) to provide SSL/TLS certificates for the Application Load Balancer. ACM allows easy provisioning, management, and renewal of public and private certificates, ensuring secure communication between users and applications. To secure data at rest, AWS Key Management Service (KMS) is used to manage encryption keys for Amazon EBS volumes. EBS integrates with AWS KMS, allowing for server-side encryption using KMS- managed keys (SSE-KMS), thus meeting the encryption at rest requirement. GuardDuty (A) is for threat detection, not encryption. AWS Shield (B) protects against DDoS attacks, not encryption. Secrets Manager (D) manages credentials, not general data encryption. This solution follows the AWS Well-Architected Framework ?Security Pillar.
Community Discussion
No community discussion yet for this question.