A Developer Must Encrypt a 100-GB Object Using AWS KMS

Multiple Choice

A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

A) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
B) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
C) Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
D) Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data