SCS-C02 · Question #234
A company runs a cron job on an Amazon EC2 instance on a predefined schedule The cron job calls a bash script that encrypts a 2 KB file. A security engineer creates an AWS Key Management Service (AWS
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #234. The question stem and answer options stay visible for context.
Question
A company runs a cron job on an Amazon EC2 instance on a predefined schedule The cron job calls a bash script that encrypts a 2 KB file. A security engineer creates an AWS Key Management Service (AWS KMS) customer managed key with a key policy. The key policy and the EC2 instance rote have the necessary configuration for this job. Which process should the bash script use to encrypt the file?
Options
- AUse the aws kms encrypt command to encrypt the file by using the existing KMS key.
- BUse the aws kms create-grant command to generate a grant for the existing KMS key.
- CUse the aws kms encrypt command to generate a data key. Use the plaintext data key to encrypt
- DUse the aws kms generate-data-key command to generate a data key. Use the encrypted data
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.