S3 Encryption Options Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption at Rest

What you'll be asked

  1. Which of the following is the simplest way to ensure all objects uploaded to an S3 bucket are automatically encrypted at rest without requiring any client-side configuration?
  2. When using SSE-KMS (Server-Side Encryption with AWS KMS-managed keys), what is the primary benefit of using a Customer Managed Key (CMK) over the AWS Managed Key (aws/s3)?
  3. An organization requires that encryption keys be managed entirely on-premises and never stored within AWS. Which S3 encryption option must they choose?
  4. A developer is performing a cross-account copy of objects from Bucket A to Bucket B. The objects in Bucket A are encrypted with a Customer Managed Key (CMK). What is required for the copy to succeed?
  5. Which of the following scenarios best justifies the use of S3 Bucket Keys when using SSE-KMS?

Answers and explanations come after you submit.