A company is deploying a public-facing global application on AWS using Amazon CloudFront. The application communicates with an external system. A solutions architect needs to ensure the data is secured during end-to-end transit and at rest. Which combination of steps will satisfy these requirements? (Choose three.)

Question

Quizplus · Accepted Answer

These options provide end-to-end encryption for data in transit and at rest. A public certificate secures data in transit between the client and CloudFront, and between CloudFront and the origin server. Encrypting Amazon EBS volumes using AWS KMS ensures data at rest is protected. Using SSL or a VPN encrypts data in transit between the application and the external system.

A Company Is Deploying a Public-Facing Global Application on AWS