A healthcare software company is storing highly sensitive patient records on Amazon S3. To comply with regulatory standards, they need to ensure that the data is encrypted while it is stored on the cloud. Which service feature should the company use to achieve this requirement?
Activating AWS Shield Advanced for the S3 buckets containing patient records
Enabling server-side encryption with Amazon S3-managed encryption keys (SSE-S3)
Implementing SSL/TLS to encrypt data in transit to and from Amazon S3
Using Amazon Macie to automatically classify and encrypt the patient records
Amazon S3 server-side encryption (SSE) allows users to encrypt data at rest. The company is required to encrypt the sensitive records while they are stored, which refers to encryption at rest. AWS Key Management Service (KMS) managed keys (SSE-KMS), customer-provided keys (SSE-C), and Amazon S3-managed keys (SSE-S3) are all valid encryption options for data at rest. The correct answer is 'Enabling server-side encryption with Amazon S3-managed encryption keys (SSE-S3)' because it directly pertains to data at rest. Enabling encryption in transit (by utilizing HTTPS for data transfer) does not apply to data at rest, and ‘AWS Shield Advanced’ is primarily used for protection against Distributed Denial of Service (DDoS) attacks, not for encrypting data.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is encryption at rest, and why is it important?
Open an interactive chat with Bash
What is the difference between SSE-S3, SSE-KMS, and SSE-C?
Open an interactive chat with Bash
How does enabling SSL/TLS differ from server-side encryption on Amazon S3?
Open an interactive chat with Bash
AWS Cloud Practitioner CLF-C02
Security and Compliance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .