A company wants to prevent public exposure of data that is stored in Amazon S3.
Which combination of steps should a security engineer take to meet this requirement? (Choose two.)

A. Turn on S3 Block Public Access.

B. Enforce S3 bucket encryption by using server-side encryption with AWS KMS managed keys (SSE-KMS).

C. Enforce S3 bucket encryption by using server-side encryption with Amazon S3 managed encryption keys (SSE-S3).

D. Use S3 Storage Lens.

E. Use Amazon Macie.






 

Suggested Answer: AC

Community Answer: AB




This question is in SCS-C01 AWS Certified Security – Specialty Exam
For getting AWS Certified Security – Specialty Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.