Security & ComplianceCâu 50 / 100
A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
a.Disable encryption entirely
b.Store keys in the application source code
c.Server-side encryption with keys managed by AWS (SSE)
d.Only encrypt data after downloading it locally
Giải thích
Server-side encryption lets AWS encrypt object data at rest, with key management handled by S3 or KMS. This provides encryption at rest without the customer having to build their own encryption process.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- Which AWS service can be used to provision and manage SSL/TLS certificates for use with AWS services like load balancers and CloudFront?
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- Which statement best distinguishes an IAM user from an IAM role?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?
Cập nhật gần nhất: · quy trình kiểm tra
Sen Lin, Người sáng lập PrepPass · Đối chiếu với AWS Certified Cloud Practitioner (CLF-C02) · Quy trình kiểm tra