AWS Certified Developer Associate · Free Practice Question Medium
Question 57
A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom. Which encryption option will meet these requirements?
- A Server-side encryption with self-managed keys
- B Server-side encryption with Amazon S3 managed keys (SSE-S3)
- C Server-side encryption with AWS KMS managed keys (SSE-KMS)
- D Server-side encryption with customer-provided keys (SSE-C)
Reveal correct answer
Correct answer: C
Explanation
The correct answer is "Server-side encryption with AWS KMS managed keys (SSE-KMS)." This option meets the requirements because it encrypts the data at rest and provides an audit trail of when the AWS KMS key was used and by whom, which aligns with the company policy.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
