Which of the following is the correct sequence of how KMS manages the keys when used along with the Redshift cluster service?

Answer options:

A.The master keys encrypt the cluster key. The cluster key encrypts the database key. The database key encrypts the data encryption keys.
B.The master keys encrypt the database key. The database key encrypts the data encryption keys.
C.The master keys encrypt the data encryption keys. The data encryption keys encrypt the database key.
D.The master keys encrypt the cluster key, database key and data encryption keys.

Answer: A
Option A is CORRECT because it provides a current scenario of how AWS KMS works with Redshift.
Option B is incorrect because the master key encrypts the cluster key and not the database key.
Option C is incorrect because the master key encrypts the cluster key, not the data encryption keys.
Option D is incorrect because the master key encrypts the cluster key only.
For more information on how Amazon Redshift uses AWS KMS, kindly refer to the following URL:
https://docs.aws.amazon.com/kms/latest/developerguide/services-redshift.html