SAA-C03 Question 36

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B3

  The tricky part is that in the question it says 'Which solution will meet these requirements with the LEAST operational overhead?' this will point you automatically to choose 'D' as an answer because it is less complex as from an architectual point of view it is simpler operationally comparing to B, but the fact that also in the answer it says 'Data in both s3 buckets must be encrypted and protected with the same KMS key, this eliminates B as B requires two seperates KMS keys. D is arguably better from a practical standpoint but B is the only one that technically satisfies all the given constrains!

• Chose B1

  Use a multi-Region AWS KMS customer managed key with client-side encryption to ensure consistent encryption/decryption across Regions, and minimize operational overhead.

• Chose B1

  B because multi region keys are needed.