ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 113 - DVA-C02 discussion

Report
Export

When using the AWS Encryption SDK how does the developer keep track of the data encryption keys used to encrypt data?

A.
The developer must manually keep Hack of the data encryption keys used for each data object.
Answers
A.
The developer must manually keep Hack of the data encryption keys used for each data object.
B.
The SDK encrypts me data encryption key and stores it (encrypted) as part of the resumed ophertext.
Answers
B.
The SDK encrypts me data encryption key and stores it (encrypted) as part of the resumed ophertext.
C.
The SDK stores the data encryption keys automaticity in Amazon S3.
Answers
C.
The SDK stores the data encryption keys automaticity in Amazon S3.
D.
The data encryption key is stored m the user data for the EC2 instance.
Answers
D.
The data encryption key is stored m the user data for the EC2 instance.
Suggested answer: B

Explanation:

This solution will meet the requirements by using AWS Encryption SDK, which is a client-side encryption library that enables developers to encrypt and decrypt data using data encryption keys that are protected by AWS Key Management Service (AWS KMS). The SDK encrypts the data encryption key with a customer master key (CMK) that is managed by AWS KMS, and stores it (encrypted) as part of the returned ciphertext. The developer does not need to keep track of the data encryption keys used to encrypt data, as they are stored with the encrypted data and can be retrieved and decrypted by using AWS KMS when needed. Option A is not optimal because it will require manual tracking of the data encryption keys used for each data object, which is error-prone and inefficient. Option C is not optimal because it will store the data encryption keys automatically in Amazon S3, which is unnecessary and insecure as Amazon S3 is not designed for storing encryption keys. Option D is not optimal because it will store the data encryption key in the user data for the EC2 instance, which is also unnecessary and insecure as user data is not encrypted by default.

Reference: [AWS Encryption SDK], [AWS Key Management Service]

asked 16/09/2024
Ayyaz Rehan Ikram
24 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first