SAP-C02 Question 301

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Why not C? By using KMS and Lambda@Edge, you can ensure that sensitive data is encrypted both at rest and in transit, providing a robust and secure solution for your distributed application.

• 1

  Here's why option B works: Creating an RSA key pair allows you to generate a public-private key pair, where the private key is used for decryption and the public key is used for encryption. Uploading the public key to CloudFront allows the distribution to use this key to encrypt sensitive data as it moves through the application. Using field-level encryption with CloudFront and Amazon S3 ensures that only the data-handling microservice (which has access to the private key) can decrypt the sensitive data.

• Chose B2

  The following steps provide an overview of setting up field-level encryption. For specific steps, see Set up field-level encryption. -Get a public key-private key pair. -Create a field-level encryption profile -Create a field-level encryption configuration. -Link to a cache behavior.