nerdexam
Amazon

SCS-C02 · Question #390

A company has a requirement to create a DynamoDB table. The company's software architect has provided the following CLI command for the DynamoDB table Which of the following has been taken of from a…

The correct answer is B. The above command ensures data encryption at rest for the Customer table. The above command with the "-sse-specification Enabled=true" parameter ensures that the data for the DynamoDB table is encrypted at rest. Options A,C and D are all invalid because this command is specifically used to ensure data encryption at rest…

Submitted by kevin_r· Mar 6, 2026Data Protection

Question

A company has a requirement to create a DynamoDB table. The company's software architect has provided the following CLI command for the DynamoDB table Which of the following has been taken of from a security perspective from the above command?

Exhibit

SCS-C02 question #390 exhibit

Options

  • ASince the ID is hashed, it ensures security of the underlying table.
  • BThe above command ensures data encryption at rest for the Customer table
  • CThe above command ensures data encryption in transit for the Customer table
  • DThe right throughput has been specified from a security perspective

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    72% (38)
  • C
    9% (5)
  • D
    15% (8)

Explanation

The above command with the "-sse-specification Enabled=true" parameter ensures that the data for the DynamoDB table is encrypted at rest. Options A,C and D are all invalid because this command is specifically used to ensure data encryption at rest https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/encryption.tutorial.html

Topics

#DynamoDB encryption at rest#SSE#AWS CLI#CMK

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice