AWS SAP-C02 · Question 07 · Domain 1.2: Security Controls
A company stores highly sensitive PII in Amazon S3. They require that data is encrypted at rest using keys managed by the company. The company must be able to immediately revoke access to the keys, rendering the data unreadable. Which encryption strategy meets these requirements?
Answer options:
Use Server-Side Encryption with Amazon S3 Managed Keys (SSE-S3).
Use Server-Side Encryption with AWS KMS Customer Managed Keys (SSE-KMS).
Use Server-Side Encryption with AWS KMS AWS Managed Keys (aws/s3).
Enable S3 Object Lock in Compliance mode.
75 questions · hints · full answers · grading
Expert