S3 Encryption Options Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering Encryption at Rest

S3 Encryption Options Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    Which of the following is the simplest way to ensure all objects uploaded to an S3 bucket are automatically encrypted at rest without requiring any client-side configuration?

  2. 2

    When using SSE-KMS (Server-Side Encryption with AWS KMS-managed keys), what is the primary benefit of using a Customer Managed Key (CMK) over the AWS Managed Key (aws/s3)?

  3. 3

    An organization requires that encryption keys be managed entirely on-premises and never stored within AWS. Which S3 encryption option must they choose?

  4. 4

    A developer is performing a cross-account copy of objects from Bucket A to Bucket B. The objects in Bucket A are encrypted with a Customer Managed Key (CMK). What is required for the copy to succeed?

  5. 5

    Which of the following scenarios best justifies the use of S3 Bucket Keys when using SSE-KMS?