DVA-C02 Question 77

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  A) Eliminated - The Encrypt API in AWS KMS is designed for small amounts of data (4 KB) For large files, it is more efficient and scalable to use data keys (using the GenerateDataKey API)

• 2

  D) Eliminated - this approach does not meet the requirement to encrypt data within the application prior to storage,

• Chose C1

  C is the correct answer.