A utility analytics warehouse on Amazon Redshift must protect data at rest and require encrypted client connections. What should the architect enable?
Select an answer to reveal the explanation.
Short Explanation
Warehouse data needs both a locked disk and a locked wire. Turn on Redshift encryption at rest and insist on SSL for clients. Renaming columns or opening the door wide is not a security control.
Full Explanation
Amazon Redshift supports encryption at rest (typically with KMS) and can require SSL for connections so data is protected both on disk and in transit. Disabling encryption, removing network controls for convenience, or relying on obfuscation-by-rename fails data security expectations for utility analytics.