Which AWS service provides encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

The correct answer is C. AWS Key Management Service (AWS KMS). AWS Key Management Service (AWS KMS) is used to manage encryption keys for Amazon EBS volumes. EBS encryption at rest is enabled using KMS, which provides centralized control over the cryptographic keys used to protect data. AWS automatically integrates KMS with Amazon EBS to enc

Submitted by tunde_lagos· Mar 6, 2026Security and Compliance

Question

Options

AAmazon Cognito
BAWS Identity and Access Management (IAM)
CAWS Key Management Service (AWS KMS)
DAWS Trusted Advisor

How the community answered

(46 responses)

B
4% (2)
C
93% (43)
D
2% (1)

Explanation

AWS Key Management Service (AWS KMS) is used to manage encryption keys for Amazon EBS volumes. EBS encryption at rest is enabled using KMS, which provides centralized control over the cryptographic keys used to protect data. AWS automatically integrates KMS with Amazon EBS to encrypt data at rest, ensuring that data is secured while stored on the disk.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice