AWS Certified Developer Associate DVA-C02 Practice Question
A company is migrating an application to the cloud and will store highly sensitive files in an object storage service. To adhere to their strict security protocols, the encryption keys must remain solely under the company's control and not be transmitted outside their environment. Which technique should the application developers use to protect the files before transferring them to the storage service?
Designate the cloud provider’s key management service to handle encryption key generation and rotation
Activate automatic encryption provided by the object storage service upon file upload
Leverage the cloud platform to supply encryption keys each time files need to be secured
Encrypt files on-premises using the company's own encryption mechanisms and keys prior to upload
Encrypting data on the developer's side before sending it to the storage service is the right approach when the encryption keys must be managed within the company’s control. This procedure, known as client-side encryption, ensures that the keys are not exposed to the cloud platform during transit or at rest, satisfying the security policy that keys must not leave the company's environment. All server-side encryption options would not fit the requirement since they involve the handling or transmission of keys within the cloud platform's environment.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is client-side encryption, and how does it work?
Open an interactive chat with Bash
How does client-side encryption differ from server-side encryption?
Open an interactive chat with Bash
What tools or methods can developers use for client-side encryption in AWS?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .