nerdexam
Amazon

SOA-C02 · Question #652

A company is using Amazon EventBridge to deliver events to an Amazon Simple Queue Service (Amazon SQS) queue. The solution was fully functional until the company enabled AWS Key Management Service (AW

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #652. The question stem and answer options stay visible for context.

Submitted by jakub_pl· Mar 30, 2026Security and Compliance

Question

A company is using Amazon EventBridge to deliver events to an Amazon Simple Queue Service (Amazon SQS) queue. The solution was fully functional until the company enabled AWS Key Management Service (AWS KMS) encryption with a customer managed key on the SQS queue. A SysOps administrator must add KMS permissions to allow EventBridge to publish to the KMS encrypted SQS queue. The SysOps administrator must add the permissions to the Action section of the following KMS encryption key policy:

Which two permissions will allow EventBridge to publish to the KMS encrypted SQS queue?

Exhibit

SOA-C02 question #652 exhibit

Options

  • A"kms:Encrypt",
  • B"kms:Encrypt",
  • C"kms:Decrypt",
  • D"kms:Decrypt",

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#KMS key policy#SQS encryption#EventBridge permissions#customer managed keys
Full SOA-C02 Practice