AWS Certified Cloud Practitioner · Free Practice Question Easy
Question 64
- A AWS Certificate Manager
- B AWS Config
- C AWS Systems Manager
- D AWS KMS
Reveal correct answer
Correct answer: D
Explanation
AWS Key Management Service (AWS KMS) is used to provide encryption for Amazon Elastic Block Store (Amazon EBS). AWS KMS is a managed service that enables you to create and control the encryption keys used to encrypt your data. With AWS KMS, you can manage the lifecycle of your encryption keys and use them to encrypt and decrypt data across AWS services. When you enable encryption for an EBS volume, AWS KMS generates and manages the encryption keys, ensuring that your data is protected both at rest and in transit.A. AWS Certificate Manager is not used for encrypting Amazon EBS. It is used for managing SSL/TLS certificates for securing network communications.
B. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. It is not used for encryption. Therefore, it is the wrong answer for providing encryption for Amazon EBS.
C. AWS Systems Manager is not used for providing encryption for Amazon EBS. It is a service that helps you manage your AWS resources and applications, offering features like automation, patch management, and inventory. Encryption for Amazon EBS is provided by AWS KMS (Key Management Service).
D. The correct answer is because AWS KMS (Key Management Service) is used to create and manage cryptographic keys for encryption, including those used for encrypting Amazon EBS volumes.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
