AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ97

Data Security and Governance

A data engineer uploads confidential documents to an Amazon S3 bucket each day. The engineer needs a solution to independently verify the integrity of all uploaded data and confirm that no corruption occurred during transfer.

Which solution meets this requirement?

  • A Download a subset of the data after the data is uploaded to the S3 bucket. Manually validate the objects for integrity.
  • B Change the default encryption on the S3 bucket to server-side encryption with customer-provided keys (SSE-C). Turn on S3 bucket keys to validate data integrity.
  • C Calculate the SHA-256 checksum for the objects before uploading the objects. Pass the calculated value to the AWS SDK in each upload request.
  • D Download the complete data after the data is uploaded to the S3 bucket. Programmatically validate the objects for integrity.
Explanation

Providing a precomputed SHA-256 checksum with each upload lets Amazon S3 independently calculate the checksum for the received object and compare it with the supplied value. S3 accepts the upload only when the checksums match, which verifies integrity during transfer for every object.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!