SAP-C02 · Question #570
An online survey company runs its application in the AWS Cloud. The application is distributed and consists of microservices that run in an automatically scaled Amazon Elastic Container Service…
The correct answer is B. Create an RSA key pair that is dedicated to the data-handing microservice. Upload the public key. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level- - Get a public key-private key pair - Create a field-level encryption profile - Create a field-level encryption configuration - Link to a cache behavior An RSA key pair includes a private and a…
Question
An online survey company runs its application in the AWS Cloud. The application is distributed and consists of microservices that run in an automatically scaled Amazon Elastic Container Service (Amazon ECS) cluster. The ECS cluster is a target for an Application Load Balancer (ALB). The ALB is a custom origin for an Amazon CloudFront distribution. The company has a survey that contains sensitive data. The sensitive data must be encrypted when it moves through the application. The application's data-handling microservice is the only microservice that should be able to decrypt the data Which solution will meet these requirements?
Options
- ACreate a symmetric AWS Key Management Service (AWS KMS) key that is dedicated to the
- BCreate an RSA key pair that is dedicated to the data-handing microservice. Upload the public key
- CCreate a symmetric AWS Key Management Service (AWS KMS) key that is dedicated to the
- DCreate an RSA key pair that is dedicated to the data-handling microservice. Create a
How the community answered
(39 responses)- A5% (2)
- B69% (27)
- C8% (3)
- D18% (7)
Explanation
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level- - Get a public key-private key pair - Create a field-level encryption profile - Create a field-level encryption configuration - Link to a cache behavior An RSA key pair includes a private and a public key (asymmetric)
Community Discussion
No community discussion yet for this question.