nerdexam
AmazonAmazon

SCS-C02 · Question #163

SCS-C02 Question #163: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #163. The question stem and answer options stay visible for context.

Submitted by kim_seoul· Mar 6, 2026

Question

A company runs workloads in the us-east-1 Region. The company has never deployed resources to other AWS Regions and does not have any multi-Region resources. The company needs to replicate its workloads and infrastructure to the us-west-1 Region. A security engineer must implement a solution that uses AWS Secrets Manager to store secrets in both Regions. The solution must use AWS Key Management Service (AWS KMS) to encrypt the secrets. The solution must minimize latency and must be able to work if only one Region is available. The security engineer uses Secrets Manager to create the secrets in us-east-1. What should the security engineer do next to meet the requirements?

Options

  • AEncrypt the secrets in us-east-1 by using an AWS managed KMS key. Replicate the secrets to
  • BEncrypt the secrets in us-east-1 by using an AWS managed KMS key. Configure resources in us-
  • CEncrypt the secrets in us-east-1 by using a customer managed KMS key. Configure resources in
  • DEncrypt the secrets in us-east-1 by using a customer managed KMS key. Replicate the secrets to

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C02 PracticeBrowse All SCS-C02 Questions