
Ultimate access to all questions.
The development team at a company is seeking to encrypt a 111 GB object and is considering using AWS Key Management Service (KMS) for this purpose. Given the size of the object, what would be the most efficient solution for encrypting the object with AWS KMS?
A
Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
B
Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
C
Make a GenerateDataKeyWithPlaintext API call that returns an encrypted copy of a data key. Use a plaintext key to encrypt the data
D
Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data