Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 234 discussion

DDDDDDDDDDDDD

D is ok: https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/#:~:text=Solution%20overview,console%2C%20CLI%2C%20or%20SDK.&text=To%20encrypt%20an%20object%20at,S3%2C%20or%20SSE%2DKMS.

Deprecated question from SAA-C02 bc: Amazon S3 now applies server-side encryption with Amazon S3 managed keys (SSE-S3) as the base level of encryption for every bucket in Amazon S3. Starting January 5, 2023, all new object uploads to Amazon S3 are automatically encrypted at no additional cost and with no impact on performance. https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html You are not required to make any changes to your existing applications. Because default encryption is enabled for all of your buckets, all new objects uploaded to Amazon S3 are automatically encrypted. https://docs.aws.amazon.com/AmazonS3/latest/userguide/default-encryption-faq.html

D is the answer

https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html

Passed the exam on 26th June, this question was on my test.

Passed the exam on 19th June 2021. This question appeared in my exam. Marking it for future help

D; purely based on "x-amz-server-side-encryption" in accordance to the qn on encryption

D for sure "server-side-encryption"

Ans=D. Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

Ans. D - https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/

AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN. AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks. The Answer is D here , as it is talking about connecting two environments.

D should be

It's D

D. https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/

D is correct.

It's D.