nerdexam
Amazon

CLF-C02 · Question #758

Which AWS service can be used to encrypt data at rest?

The correct answer is D. AWS Key Management Service (AWS KMS). AWS KMS is the managed service for creating, storing, and controlling cryptographic keys used to encrypt data at rest across AWS services.

Submitted by ravi_2018· Mar 6, 2026Security and Compliance

Question

Which AWS service can be used to encrypt data at rest?

Options

  • AAmazon GuardDuty
  • BAWS Shield
  • CAWS Security Hub
  • DAWS Key Management Service (AWS KMS)

How the community answered

(19 responses)
  • A
    5% (1)
  • C
    5% (1)
  • D
    89% (17)

Explanation

AWS KMS is the managed service for creating, storing, and controlling cryptographic keys used to encrypt data at rest across AWS services.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice