Q24 — AWS SAA-C03 Ch.10

Question 24 of 100 | ← Chapter 10

Q624. A company is building an ecommerce application and needs to store sensitive customer information. The company needs to give customers the ability to complete purchase transactions on the website. The company also needs to ensure that sensitive customer data is protected even from database administrators.Which solution meets these requirements?

Correct Answer: B. Store sensitive data in Amazon RDS for MySQL Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data.

Explanation

To meet the requirement of storing sensitive customer information and ensuring its protection, even from database administrators, the most appropriate solution is:B. Store sensitive data in Amazon RDS for MySQL. Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data.B. Storing sensitive data in Amazon RDS for MySQL provides a managed database service that can securely store and manage customer information. By using AWS Key Management Service (AWS KMS) client-side encryption, the data can be encrypted before it is sent to the database. This ensures that the data remains encrypted at rest and in transit, providing an additional layer of security.Option A is not the best choice:A. Storing sensitive data in an Amazon Elastic Block Store (Amazon EBS) volume and using EBS encryption to encrypt the data does not provide the same level of security as using client-side encryption. In this scenario, the encryption would be performed by the database administrators, which would not protect the data from them.Option C is not the best choice either:C. Storing sensitive data in Amazon S3 and using AWS Key Management Service (AWS KMS) server-side encryption to encrypt the data would protect the data at rest in S3. However, it does not provide the same level of transactional capabilities as a relational database like Amazon RDS for MySQL. Additionally, using S3 bucket policies to restrict access may not provide the necessary fine-grained access control required for an ecommerce application.Option D is not the best choice either:D. Storing sensitive data in Amazon FSx for Windows Server and using Windows file permissions to restrict access is not the most suitable solution for storing and managing sensitive customer information. Amazon FSx for Windows Server is primarily used for providing a fully managed file storage service for Windows-based applications and may not offer the same level of security and transactional capabilities as a relational database.Therefore, the most appropriate solution to meet the requirements of storing sensitive customer information and protecting it even from database administrators is to store the data in Amazon RDS for MySQL and use AWS Key Management Service (AWS KMS) client-side encryption (option B).B50%-C50%