Correct Answer: Amazon S3 server-side encryption with KMS (SSE-KMS) and CloudTrail data events enabled
SSE-KMS provides the encryption and the audit trail, as KMS log events are naturally captured in CloudTrail, identifying the user and the resource accessed....
Correct Answer
Amazon S3 server-side encryption with KMS (SSE-KMS) and CloudTrail data events enabled
Why This Answer Is Correct
SSE-KMS provides the encryption and the audit trail, as KMS log events are naturally captured in CloudTrail, identifying the user and the resource accessed.
This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Scenario: A global social media company wants to ensure that user-uploaded photos are available immediately even if an entire AWS Region goes offline. Solution ?
Scenario: You are migrating a legacy Java application to AWS. You want to modernize it into microservices but have limited time. Which platform allows you to quickly containerize and deploy with minimal infrastructure management?
Scenario: You are migrating a mission-critical web application to AWS. You need to ensure that the application can handle a complete regional outage with an RTO of 15 minutes. Solution ?
Scenario: You are designing a high-scale data analytics platform. You need a way to orchestrate multiple AWS Glue jobs and Lambda functions into a single workflow with error handling and retries. Solution ?
Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all EC2 instances at 6 PM and restart them at 8 AM. Solution ?