Free DAS-C01 Web TestEngine Demo

Q23 Single choice

A company uses Amazon Redshift to store historical sales transactions. The company must encrypt data at rest in the Redshift cluster. The company also must store encryption keys by using an on-premises
hardware security module (HSM).

Which solution will meet these requirements with the LEAST operational overhead?

A
Create and store encryption keys by using AWS CloudHSM Classic. Launch a new Redshift cluster with the option to use CloudHSM Classic to store keys.
B
Establish an AWS Site-to-Site VPN connection between the existing VPC and the on-premises network. Create an HSM connection and a client certificate for the on-premises HSM. Launch a new Redshift cluster in the VPC with the option to use the on-premises HSM to store keys.
C
Establish an AWS Site-to-Site VPN connection between the existing VPC and the on-premises network. Create an HSM connection and a client certificate for the on-premises HSM. Configure the existing Redshift cluster in the VPC with the option to use the on-premises HSM to store keys. Reboot the Redshift cluster.
D
Create a replica of the on-premises HSM in AWS CloudHSM. Launch a new Redshift cluster with the option to use CloudHSM to store keys.

DAS-C01 Web TestEngine demo