SAA-C03 · Question #754
SAA-C03 Question #754: Real Exam Question with Answer & Explanation
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #754. The question stem and answer options stay visible for context.
Question
A software as a service (SaaS) company runs a multi-tenant data lake by using Amazon S3. Each tenant's data is stored in an isolated data path in an S3 bucket. The data lake supports custom encryption for each tenant. The company wants to allow tenants to use their own keys to encrypt only a subset of their data. The rest of the data will use server-side encryption with Amazon S3 managed keys (SSE-S3). The company needs to set up ongoing data replication to another S3 bucket in a different AWS Region for the objects encrypted with imported keys. Which solution will meet these requirements?
Options
- AUse S3 prefixes for each tenant's data. Use server-side encryption with AWS KMS keys (SSE-
- BUse S3 prefixes for each tenant's data. Use server-side encryption with customer-provided keys
- CUse S3 prefixes for each tenant's data. Use server-side encryption with AWS KMS keys (SSE-
- DCreate a separate S3 bucket for each tenant. Use server-side encryption with customer-provided
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.