A company needs to encrypt data at rest in the AWS Cloud by using an encryption key that the company controls. Which AWS service should the company use to meet this requirement?

The correct answer is C. AWS Key Management Service (AWS KMS). AWS Key Management Service (AWS KMS) allows the company to create and manage encryption keys, including customer-managed keys (CMKs). These keys can be used to encrypt data at rest, ensuring that the company retains full control over the encryption process and key

Submitted by deeparc· Mar 6, 2026Security and Compliance

Question

Options

AAWS Certificate Manager (ACM)
BAmazon Cognito
CAWS Key Management Service (AWS KMS)
DAWS Trusted Advisor

How the community answered

(48 responses)

A
2% (1)
B
4% (2)
C
88% (42)
D
6% (3)

Explanation

AWS Key Management Service (AWS KMS) allows the company to create and manage encryption keys, including customer-managed keys (CMKs). These keys can be used to encrypt data at rest, ensuring that the company retains full control over the encryption process and key

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice