SCS-C02 · Question #306
Your IT Security department has mandated that all data on EBS volumes created for underlying EC2 Instances need to be encrypted. Which of the following can help achieve this?
The correct answer is A. AWS KMS API. The AWS Documentation mentions the following on AWS KMS AWS Key Management Service KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. AWS KMS is integrated with other AWS services including Amazon Elastic…
Question
Your IT Security department has mandated that all data on EBS volumes created for underlying EC2 Instances need to be encrypted. Which of the following can help achieve this?
Options
- AAWS KMS API
- BAWS Certificate Manager
- CAPI Gateway with STS
- DIAM Access Key
How the community answered
(28 responses)- A75% (21)
- B7% (2)
- C14% (4)
- D4% (1)
Explanation
The AWS Documentation mentions the following on AWS KMS AWS Key Management Service KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. AWS KMS is integrated with other AWS services including Amazon Elastic Block Store (Amazon EBS), Amazon Simple Storage Service (Amazon S3), Amazon Redshift Amazon Elastic Transcoder, Amazon WorkMail, Amazon Relational Database Service (Amazon RDS), and others to make it simple to encrypt your data with encryption keys that you Option B is incorrect - The AWS Certificate manager can be used to generate SSL certificates that can be used to encrypt traffic transit, but not at rest Option C is incorrect is again used for issuing tokens when using API gateway for traffic in transit. Option D is used for secure access to EC2 Instances https://docs.aws.amazon.com/kms/latest/developereuide/overview.html
Topics
Community Discussion
No community discussion yet for this question.