S3 Encryption Options Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption at Rest

What you'll be asked

  1. Which of the following is the simplest way to ensure all objects uploaded to an S3 bucket are automatically encrypted at rest?
  2. When using SSE-KMS (Server-Side Encryption with AWS KMS keys), which entity is responsible for managing the rotation of the master key?
  3. An organization requires that they maintain full control over the encryption keys used for S3, including the ability to store them on-premises. Which encryption option should they choose?
  4. You are auditing a bucket and notice that objects are encrypted using SSE-S3. What is the primary characteristic of this encryption method?
  5. If you configure an S3 bucket policy to deny any 's3:PutObject' request that does not include the 'x-amz-server-side-encryption' header set to 'aws:kms', what happens to attempts to upload objects using SSE-S3?

Answers and explanations come after you submit.