S3 Encryption Options Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering Encryption at Rest

S3 Encryption Options Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    Which of the following is the simplest way to ensure all objects uploaded to an S3 bucket are automatically encrypted at rest?

  2. 2

    When using SSE-KMS (Server-Side Encryption with AWS KMS keys), which entity is responsible for managing the rotation of the master key?

  3. 3

    An organization requires that they maintain full control over the encryption keys used for S3, including the ability to store them on-premises. Which encryption option should they choose?

  4. 4

    You are auditing a bucket and notice that objects are encrypted using SSE-S3. What is the primary characteristic of this encryption method?

  5. 5

    If you configure an S3 bucket policy to deny any 's3:PutObject' request that does not include the 'x-amz-server-side-encryption' header set to 'aws:kms', what happens to attempts to upload objects using SSE-S3?