nerdexam
AmazonAmazon

SAA-C03 · Question #36

SAA-C03 Question #36: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #36. The question stem and answer options stay visible for context.

Submitted by ngozi_ng· Mar 4, 2026Design Secure Architectures

Question

A company uses Amazon EC2 instances and stores data on Amazon Elastic Block Store (Amazon EBS) volumes. The company must ensure that all data is encrypted at rest by using AWS Key Management Service (AWS KMS). The company must be able to control rotation of the encryption keys. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • ACreate a customer managed key Use the key to encrypt the EBS volumes.
  • BUse an AWS managed key to encrypt the EBS volumes. Use the key to configure automatic key
  • CCreate an external KMS key with imported key material. Use the key to encrypt the EBS volumes.
  • DUse an AWS owned key to encrypt the EBS volumes.

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions