Tiger Investments (TI) is a private equity trust manager specializing in border market investments. The Group is considered a pioneer investor in Southeast Asia’s Greater Sub-region and the Caribbean. Tiger Capital creates private equity funds targeting pre-emerging, post-conflict or post-disaster economies that are undergoing transition and are poised for rapid growth. The funds invest commercially in basic businesses, targeting attractive economic and social returns. Tiger Capital invests through a diversity of financial instruments including equity, and debt
TI launched EMR 3.2.1 using EMRFS storage to support their real time data analytics.IT team observed that once objects are added to EMRFS in one operation and then immediately list objects in a subsequent operation, the list and the set of objects processed is incomplete most of the times. This is a continuous problem that TI team is facing mostly when running multi-step sequential steps in extract-transform-load (ETL) data processing pipelines. EMRFS Consistency View is enabled. EMRFS on S3 Encryption needs to be enabled to align to enterprise security guidelines and Consistency notifications. Please advise.
Select 2 options.

Answer options:

A.S3 server-side encryption with KMS Key Management (SSE-KMS)
B.AWS KMS Customer Master Keys (CMKs) for EMRFS Encryption
C.S3 client-side encryption with custom materials provider
D.server-side encryption with custom materials provider

Answer : B, C
Option A is incorrect -S3 server-side encryption with KMS Key Management (SSE-KMS) is not available when using Amazon EMR release version 4.4 or earlier
Option B is Correct - You use an AWS KMS customer master key (CMK) set up with policies suitable for Amazon EMR.
https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-encryption-enable.html#emr-awskms-keys 
Option C is Correct - With Amazon S3 client-side encryption, the Amazon S3 encryption and decryption takes place in the EMRFS client on your cluster. Objects are encrypted before being uploaded to Amazon S3 and decrypted after they are downloaded. The provider you specify supplies the encryption key that the client uses. The client can use keys provided by AWS KMS (CSE-KMS) or a custom Java class that provides the client-side master key (CSE-C). The encryption specifics are slightly different between CSE-KMS and CSE-C, depending on the specified provider and the metadata of the object being decrypted or encrypted.
https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-data-encryption-options.html
Option D is incorrect - does not support S3 server side encryption with custom materials provider