ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

AWS Transfer Family can expose a managed Secure File Transfer Protocol (SFTP) endpoint that maps directly to an S3 bucket. Because SFTP runs over SSH, all data is encrypted in transit and users authenticate with SSH key pairs, meeting the compliance mandate. Existing scripts that already use the standard sftp client continue working unchanged, and AWS handles server availability, scaling, and patching-so operational overhead is minimal.

Running an EC2 instance with vsftpd over FTPS would meet encryption needs but requires you to provision, secure, monitor, and patch the server, and scripts would have to switch from sftp to ftps. Ordering AWS Snowball Edge devices nightly is manual, incurs delay, and does not satisfy the requirement for routine automated transfers over the network. Using Amazon FSx with SMB over a VPN demands Windows file-sharing tools or mounts, so existing sftp-based workflows must be rewritten and you would still manage VPN and file-server scaling. Therefore, the AWS Transfer Family SFTP option is the most suitable choice.