AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 259

Question

A company is planning to migrate its applications to AWS in a single AWS Region. The company’s applications will use a combination of Amazon EC2 instances, Elastic Load Balancing (ELB) load balancers, and Amazon S3 buckets. The company wants to complete the migration as quickly as possible. All the applications must meet the following requirements: • Data must be encrypted at rest. • Data must be encrypted in transit. • Endpoints must be monitored for anomalous network traffic. Which combination of steps should a security engineer take to meet these requirements with the LEAST effort? (Choose three.)

Accepted Answer

Correct answer: B, D, F. The correct answer is B, D, F. Option B: Enable Amazon GuardDuty in all AWS accounts. Option D: Configure AWS Certificate Manager (ACM). Configure the load balancers to use certificates from ACM. Option F: Use AWS Key Management Service (AWS KMS) for key management. Create an S3 bucket policy to deny any PutObject command with a condition for x-amz-server-side-encryption. Amazon S3 provides durable, scalable object storage that is fully managed. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Security - Specialty SCS-C02 — Question 259