AWS Certified Solutions Architect Associate · Free Practice Question Medium
Question 61
A company wants to build a scalable key management infrastructure to support developers who need to encrypt data in their applications. What should a solutions architect do to reduce the operational burden?
- A Use AWS Certificate Manager (ACM) to create, store, and assign the encryption keys.
- B Use multi-factor authentication (MFA) to protect the encryption keys.
- C Use AWS Key Management Service (AWS KMS) to protect the encryption keys.
- D Use an IAM policy to limit the scope of users who have access permissions to protect the encryption keys.
Reveal correct answer
Correct answer: C
Explanation
To reduce the operational burden for a company building a scalable key management infrastructure, the solutions architect should use AWS Key Management Service (AWS KMS) to protect the encryption keys. AWS KMS provides a managed service that simplifies the creation, management, and control of encryption keys, thereby reducing the operational overhead for developers.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
