AWS Certified AI Practitioner AIF-C01 Practice Question
Your AI workload stores its training datasets in Amazon S3. The security team insists that every object be encrypted at rest with encryption keys that the company creates and manages, and they do not want code changes. Which AWS solution best meets this requirement?
Scan the bucket with Amazon Macie and apply client-side encryption libraries in the application.
Configure S3 default encryption with server-side encryption using a customer-managed AWS KMS key (SSE-KMS).
Enable default encryption with server-side encryption using S3-managed keys (SSE-S3).
Route S3 traffic through AWS PrivateLink to keep data inside the AWS network.
Server-side encryption with AWS KMS (SSE-KMS) lets Amazon S3 automatically encrypt every object as it is written, while using a customer-managed AWS KMS key that the organization controls. No application changes are required because the encryption and decryption happen transparently on the server side. SSE-S3 also encrypts objects automatically, but it uses S3-managed keys, so the company would not control the keys. AWS PrivateLink provides private connectivity, not encryption at rest. Amazon Macie is a data-classification service and client-side encryption would require code changes or a separate tool.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is SSE-KMS in AWS S3?
Open an interactive chat with Bash
How does SSE-KMS differ from SSE-S3?
Open an interactive chat with Bash
What are the advantages of customer-managed keys in AWS KMS?
Open an interactive chat with Bash
AWS Certified AI Practitioner AIF-C01
Security, Compliance, and Governance for AI Solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .