nerdexam
Amazon

CLF-C02 · Question #487

A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service…

The correct answer is C. AWS CloudHSM. AWS CloudHSM provides single-tenant hardware security modules (HSMs) that allow you to generate, store, and manage your own cryptographic keys within the AWS Cloud. This service is designed to meet stringent regulatory compliance requirements for data security, offering…

Submitted by obi.ng· Mar 6, 2026Security and Compliance

Question

A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

Options

  • AAWS Key Management Service (AWS KMS)
  • BAWS Certificate Manager (ACM)
  • CAWS CloudHSM
  • DAWS Systems Manager

How the community answered

(18 responses)
  • A
    6% (1)
  • C
    94% (17)

Explanation

AWS CloudHSM provides single-tenant hardware security modules (HSMs) that allow you to generate, store, and manage your own cryptographic keys within the AWS Cloud. This service is designed to meet stringent regulatory compliance requirements for data security, offering dedicated HSM instances that you control.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice