A developer is creating a Java application that will store sensitive data in an Amazon DynamoDB table. The data must be encrypted at all times. How can the developer meet this requirement?

The correct answer is C. Implement client-side encryption in the application code by using the DynamoDB Encryption. With server-side encryption, TLS encrypts your data in transit over an HTTPS connection. Your data is decrypted at the DynamoDB endpoint, and then re-encrypted before being stored in DynamoDB. Client-side encryption provides end-to-end protection for your data from its source…

Submitted by manish99· Mar 5, 2026Security

Question

Options

AEnable encryption at rest by using an AWS Key Management Service (AWS KMS) AWS owned
BEnable encryption at rest by using an AWS Key Management Service (AWS KMS) customer
CImplement client-side encryption in the application code by using the DynamoDB Encryption
DUse an HTTPS connection to encrypt data in transit.

How the community answered

(26 responses)

A
8% (2)
B
4% (1)
C
69% (18)
D
19% (5)

Explanation

With server-side encryption, TLS encrypts your data in transit over an HTTPS connection. Your data is decrypted at the DynamoDB endpoint, and then re-encrypted before being stored in DynamoDB. Client-side encryption provides end-to-end protection for your data from its source through storage in DynamoDB and back to you. https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice