Q96 — AWS DEA-C01 Ch.1

Question 96 of 100 | ← Chapter 1

A company is using an AWS Transfer Family server to migrate data from an on-premises environment to AWS. Company policy mandates the Use of TLS 1.2 or above to encrypt the data in transit. Which solution will meet these requirements?

• A. Generate new SSH keys for the Transfer Family server. Make the old keys and the new keys available for use.
• B. Update the security group rules for the on-premises network to allow only connections that use TLS 1.2 or above.
• C. Update the security policy of the Transfer Family server to specify a minimum protocol version of TLS 1.2 ✓
• D. Install an SSL certi􀂬cate on the Transfer Family server to encrypt data transfers by using TLS 1.2.

Correct Answer: C. Update the security policy of the Transfer Family server to specify a minimum protocol version of TLS 1.2

Explanation

AWS Transfer Family的安全策略用于配置加密协议版本，确保数据传输符合指定的TLS要求。根据AWS官方文档，安全策略允许明确设置最低TLS版本（如TLS 1.2）。选项A中的SSH密钥用于身份验证而非传输加密协议控制；选项B的安全组无法限制TLS版本，仅控制网络流量；选项D的SSL证书启用加密但无法单独限制协议版本。正确方法是通过修改服务器的安全策略，直接指定最低TLS版本为1.2，确保仅允许符合要求的加密连接。