Security & Compliance第 50 / 100 题
A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
a.Disable encryption entirely
b.Store keys in the application source code
c.Server-side encryption with keys managed by AWS (SSE)
d.Only encrypt data after downloading it locally
解析
Server-side encryption lets AWS encrypt object data at rest, with key management handled by S3 or KMS. This provides encryption at rest without the customer having to build their own encryption process.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which AWS service can be used to provision and manage SSL/TLS certificates for use with AWS services like load balancers and CloudFront?
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- Which statement best distinguishes an IAM user from an IAM role?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?