ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 2 - DVA-C02 discussion

Report
Export

A developer has an application that stores data in an Amazon S3 bucket. The application uses an HTTP API to store and retrieve objects. When the PutObject API operation adds objects to the S3 bucket the developer must encrypt these objects at rest by using server-side encryption with Amazon S3 managed keys (SSE-S3).

Which solution will meet this requirement?

A.
Create an AWS Key Management Service (AWS KMS) key. Assign the KMS key to the S3 bucket.
Answers
A.
Create an AWS Key Management Service (AWS KMS) key. Assign the KMS key to the S3 bucket.
B.
Set the x-amz-server-side-encryption header when invoking the PutObject API operation.
Answers
B.
Set the x-amz-server-side-encryption header when invoking the PutObject API operation.
C.
Provide the encryption key in the HTTP header of every request.
Answers
C.
Provide the encryption key in the HTTP header of every request.
D.
Apply TLS to encrypt the traffic to the S3 bucket.
Answers
D.
Apply TLS to encrypt the traffic to the S3 bucket.
Suggested answer: B

Explanation:

Amazon S3 supports server-side encryption, which encrypts data at rest on the server that stores the data. One of the encryption options is SSE-S3, which uses keys managed by S3. To use SSE-S3, the xamz-server-side-encryption header must be set to AES256 when invoking the PutObject API operation. This instructs S3 to encrypt the object data with SSE-S3 before saving it on disks in its data centers and decrypt it when it is downloaded. Reference: Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3)

asked 16/09/2024
Rehan Malik
51 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first