AWS Certified Cloud Practitioner CLF-C02Demo

By Amazon · Question Mode

QuestionQ608

Content Domain 2: Security and Compliance

Which encryption types can protect objects at rest in Amazon S3?

Choose two
  • A Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
  • B Server-side encryption with AWS KMS managed keys (SSE-KMS)
  • C TLS
  • D SSL
  • E Transparent Data Encryption (TDE)
Explanation

Amazon S3 protects stored objects with server-side encryption, including SSE-S3, which uses Amazon S3 managed keys, and SSE-KMS, which uses AWS Key Management Service keys. TLS and SSL secure data in transit rather than data at rest; Transparent Data Encryption is not an S3 object-encryption method.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!