SCS-C02 · Question #163
A company runs workloads in the us-east-1 Region. The company has never deployed resources to other AWS Regions and does not have any multi-Region resources. The company needs to replicate its…
The correct answer is D. Encrypt the secrets in us-east-1 by using a customer managed KMS key. Replicate the secrets to. To ensure minimal latency and regional availability of secrets, encrypting secrets in us-east-1 with a customer-managed KMS key and then replicating them to us-west-1 for encryption with the same key is the optimal approach. This method leverages customer-managed KMS keys for…
Question
A company runs workloads in the us-east-1 Region. The company has never deployed resources to other AWS Regions and does not have any multi-Region resources. The company needs to replicate its workloads and infrastructure to the us-west-1 Region. A security engineer must implement a solution that uses AWS Secrets Manager to store secrets in both Regions. The solution must use AWS Key Management Service (AWS KMS) to encrypt the secrets. The solution must minimize latency and must be able to work if only one Region is available. The security engineer uses Secrets Manager to create the secrets in us-east-1. What should the security engineer do next to meet the requirements?
Options
- AEncrypt the secrets in us-east-1 by using an AWS managed KMS key. Replicate the secrets to
- BEncrypt the secrets in us-east-1 by using an AWS managed KMS key. Configure resources in us-
- CEncrypt the secrets in us-east-1 by using a customer managed KMS key. Configure resources in
- DEncrypt the secrets in us-east-1 by using a customer managed KMS key. Replicate the secrets to
How the community answered
(41 responses)- A2% (1)
- B12% (5)
- C5% (2)
- D80% (33)
Explanation
To ensure minimal latency and regional availability of secrets, encrypting secrets in us-east-1 with a customer-managed KMS key and then replicating them to us-west-1 for encryption with the same key is the optimal approach. This method leverages customer-managed KMS keys for enhanced control and ensures that secrets are available in both regions, adhering to disaster recovery principles and minimizing latency by using regional endpoints.
Topics
Community Discussion
No community discussion yet for this question.