
Ultimate access to all questions.
A software development company is building a cloud-based application that processes and stores sensitive customer data. They need to ensure that the data is encrypted at rest and in transit, and that the encryption keys are securely managed and rotated regularly. Additionally, they need to maintain compliance with industry regulations for data protection and auditing. Which combination of AWS services should they use?
A
Use AWS KMS to manage encryption keys, Amazon EFS for encrypted file storage, and AWS Certificate Manager for TLS encryption in transit.
B
Use AWS CloudHSM to manage encryption keys, Amazon S3 server-side encryption for data at rest, and AWS Certificate Manager for TLS encryption in transit.
C
Use AWS Secrets Manager to store and rotate encryption keys, Amazon RDS with encryption for data at rest, and AWS Global Accelerator for secure data transfer.
D
Use AWS KMS to manage encryption keys, Amazon EBS for encrypted data volumes, and AWS WAF for web application security.