Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Cloud Practitioner · AWS
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Option E: TDE is not an Amazon S3 encryption option
The correct answers are: A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) ✅ B. Server-side encryption with AWS KMS managed keys (SSE-KMS) ✅ Reasoning: SSE-S3 uses keys managed by Amazon S3 to encrypt your data at rest. SSE-KMS integrates with AWS Key Management Service (KMS) for more control over encryption keys, including key rotation and access policies. TLS and SSL are used for data in transit, not at rest. Transparent Data Encryption (TDE) is used with databases like Amazon RDS for Oracle or SQL Server, not for S3 objects. Confidence level: High Reference: AWS S3 Encryption Documentation
A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) All Amazon S3 buckets have encryption configured by default, and all new objects that are uploaded to an S3 bucket are automatically encrypted at rest. Server-side encryption with Amazon S3 managed keys (SSE-S3) is the default encryption configuration for every bucket in Amazon S3. E. Transparent Data Encryption (TDE) is a technology used to encrypt entire databases at rest, including data and log files, to protect against unauthorized access to sensitive data.