Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 188 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 188
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom.

Which encryption option will meet these requirements?

A. Server-side encryption with Amazon S3 managed keys (SSE-S3)
B. Server-side encryption with AWS KMS managed keys (SSE-KMS)
C. Server-side encryption with customer-provided keys (SSE-C)
D. Server-side encryption with self-managed keys

Show Suggested Answer

Suggested Answer: B 🗳️

by fordiscussionstwo at Oct. 6, 2023, 2:46 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

tsangckl

1 year ago

This appear at 17 Jun exam

upvoted 1 times

...

65703c1

1 year, 1 month ago

Selected Answer: B

B is the correct answer.

upvoted 3 times

...

SerialiDr

1 year, 5 months ago

Selected Answer: B

SSE-KMS provides an additional layer of security by requiring separate permissions for the use of an encryption key to the bucket. This option also provides an audit trail by logging the use of the key in AWS CloudTrail, which is a requirement according to the company policy. The audit trail includes information about who used the key and when it was used, which fulfills the requirement for auditing.

upvoted 2 times

...

dilleman

1 year, 8 months ago

Selected Answer: B

B, since we need an audit trail of the AWK KMS key then this is the one to use.

upvoted 3 times

...

Digo30sp

1 year, 9 months ago

Selected Answer: B

B) https://www.examtopics.com/discussions/amazon/view/28801-exam-aws-certified-developer-associate-topic-1-question-217/

upvoted 4 times

...