-
S3 durable storage & encryption question erratum
updated 1 year, 5 months ago
1 Member
·
1
Post
-
Q: For data privacy, a healthcare company has been asked to comply with the Health Insurance Portability and Accountability Act (HIPAA) in handling static user documents. They instructed their Security Engineer to ensure that all of the data being backed up or stored on Amazon S3 are durably stored and encrypted.
Which combination of actions should the Engineer implement to meet the above requirement? (Select TWO.)
A (correct): Enable Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3) on the S3 bucket with AES-256 encryption.
A (correct): Encrypt the data locally first using your own encryption keys before sending the data to Amazon S3. Send the data over HTTPS.
——
The question asks for a combination, but either of the correct answers would suffice by itself to ensure that all of the data being backed up or stored on Amazon S3 are durably stored and encrypted. Combining them is not necessary when either would do. The question should be rephrased accordingly.
Log in to reply.