How is data protected when a company uses AWS Storage Gateway?
Show answer and explanation
Answer: B
Storage Gateway wraps all traffic to and from AWS in SSL/TLS, whether the gateway serves files, volumes, or virtual tapes. Data landing in S3 is encrypted at rest with SSE-S3 or SSE-KMS, and tape gateway virtual tapes are stored encrypted as well. The local cache on the gateway VM can also be encrypted for protection at the edge.
Why the other options are wrong
- A. Traffic and stored data are both encrypted, so saying nothing is encrypted is wrong.
- C. Encryption at rest is handled by S3 with SSE options; protection is not limited to stored data.
- D. The gateway handles transport and at-rest encryption, so applications do not need to implement it themselves.