Secure Architecture II

Prepare yourself for the AWS Certified Solutions Architect Associate SAA-C03 Certificate exam by tackling practice questions related to AWS CloudHSM, Amazon S3, Amazon Athena, AWS Lambda, Amazon Textract, Amazon Comprehend Medical, Amazon EC2, Amazon Cognito user pool authorizer, and Amazon Aurora to design secure architectures.

Question 24

Audit results have been given back to your company. Another requirement from the audit is that the application, hosted on EC2, must encrypt data before this data is written to storage. It has been directed internally that you should be able to handle dedicated hardware security module instances to generate and store your encryption keys. Which service could you use to meet this requirement?

A. AWS CloudHSM

B. AWS KMS

C. AWS Security Token Service

D. Amazon EBS encryption

Get hands-on with 1200+ tech skills courses.