You have an S3 bucket defined in AWS. You want to ensure that you encrypt the data before sending it across the wire. What is the best way to achieve this?

The correct answer is B. Use the AWS Encryption CLI to encrypt the data first. One can use the AWS Encryption CLI to encrypt the data before sending it across to the S3 Options A and C are invalid because this would still mean that data is transferred in plain text Option D is invalid because you cannot just enable client side encryption for the S3 bucket…

Submitted by tom_us· Mar 6, 2026Data Protection

Question

Options

AEnable server side encryption for the S3 bucket. This request will ensure that the data is
BUse the AWS Encryption CLI to encrypt the data first
CUse a Lambda function to encrypt the data before sending it to the S3 bucket.
DEnable client encryption for the bucket

How the community answered

(57 responses)

A
5% (3)
B
81% (46)
C
2% (1)
D
12% (7)

Explanation

One can use the AWS Encryption CLI to encrypt the data before sending it across to the S3 Options A and C are invalid because this would still mean that data is transferred in plain text Option D is invalid because you cannot just enable client side encryption for the S3 bucket https://aws.amazonxom/blogs/securirv/how4o-encrvpt-and-decrypt-your-data-with-the-aws-

Topics

#client-side encryption#S3 encryption#AWS Encryption CLI#data in transit

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice