When using the AWS Encryption SDK, how does the developer keep track of the data encryption keys used to encrypt data?

The correct answer is B. The SDK encrypts the data encryption key and stores it (encrypted) as part of the returned. The AWS Encryption SDK automatically encrypts the data encryption key (DEK) and stores it as part of the returned ciphertext. This process allows the encrypted DEK to be retrieved and decrypted later when needed, without requiring the developer to manually track or store the key

Submitted by anna_se· Mar 5, 2026Security

Question

Options

AThe developer must manually keep track of the data encryption keys used for each data object.
BThe SDK encrypts the data encryption key and stores it (encrypted) as part of the returned
CThe SDK stores the data encryption keys automatically in Amazon S3.
DThe data encryption key is stored in the Userdata for the EC2 instance.

How the community answered

(18 responses)

B
89% (16)
C
6% (1)
D
6% (1)

Explanation

The AWS Encryption SDK automatically encrypts the data encryption key (DEK) and stores it as part of the returned ciphertext. This process allows the encrypted DEK to be retrieved and decrypted later when needed, without requiring the developer to manually track or store the key

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice