Amazon
SAA-C03 · Question #602
A company is migrating an application from an on-premises environment to AWS. The application will store sensitive data in Amazon S3. The company must encrypt the data before storing the data in…
The correct answer is A. Encrypt the data by using client-side encryption with customer managed keys. If client-side encryption is used, the keys must be managed by the customer.
Submitted by omar99· Mar 4, 2026Design Secure Architectures
Question
A company is migrating an application from an on-premises environment to AWS. The application will store sensitive data in Amazon S3. The company must encrypt the data before storing the data in Amazon S3. Which solution will meet these requirements?
Options
- AEncrypt the data by using client-side encryption with customer managed keys.
- BEncrypt the data by using server-side encryption with AWS KMS keys (SSE-KMS).
- CEncrypt the data by using server-side encryption with customer-provided keys (SSE-C).
- DEncrypt the data by using client-side encryption with Amazon S3 managed keys.
How the community answered
(31 responses)- A94% (29)
- B3% (1)
- D3% (1)
Explanation
If client-side encryption is used, the keys must be managed by the customer.
Community Discussion
No community discussion yet for this question.