Multiple Choice
A SysOps administrator needs a secure way to connect to AWS Key Management Service (AWS KMS) within a VPC. The SysOps administrator must ensure that connections to AWS KMS do not traverse the internet. What is the MOST secure solution that meets these requirements?
A) Use a bastion host to connect to AWS KMS.
B) Use a NAT gateway to connect to AWS KMS.
C) Use a VPC gateway endpoint for Amazon S3 to connect to AWS KMS.
D) Use a VPC interface endpoint to connect to AWS KMS.
Correct Answer:

Verified
Correct Answer:
Verified
Q933: A photo-sharing site delivers content worldwide from
Q934: A user has configured the Auto Scaling
Q935: A user has setup Auto Scaling with
Q936: A user is planning to set up
Q937: A user has launched an EC2 instance
Q939: A company has a web application that
Q940: A sysadmin has created the below mentioned
Q941: A user had aggregated the CloudWatch metric
Q942: A user is trying to create an
Q943: Which services allow the customer to retain