nerdexam
AmazonAmazon

DVA-C02 · Question #371

DVA-C02 Question #371: Real Exam Question with Answer & Explanation

Sign in or unlock DVA-C02 to reveal the answer and full explanation for question #371. The question stem and answer options stay visible for context.

Submitted by devops_kid· Mar 5, 2026Security

Question

A developer is publishing critical log data to a log group in Amazon CloudWatch Logs. The log group was created 2 months ago. The developer must encrypt the log data by using an AWS Key Management Service (AWS KMS) key so that future data can be encrypted to comply with the company's security policy. Which solution will meet this requirement with the LEAST effort?

Options

  • AUse the AWS Encryption SDK for encryption and decryption of the data before writing to the log
  • BUse the AWS KMS console to associate the KMS key with the log group.
  • CUse the AWS CLI aws logs create-log-group command, and specify the key Amazon Resource
  • DUse the AWS CLI aws logs associate-kms-key command, and specify the key Amazon Resource

Unlock DVA-C02 to see the answer

You've previewed enough free DVA-C02 questions. Unlock DVA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full DVA-C02 PracticeBrowse All DVA-C02 Questions