Exams / DVA-C02 / Encryption with AWS KMS

Encryption with AWS KMS: DVA-C02 practice questions

3 free questions on Encryption with AWS KMS, from the Security domain (26% of the DVA-C02 exam guide). Every question is original and explains why each option is right or wrong.

Questions

1. An application must encrypt files of up to 200 MB with a customer managed AWS KMS key before storing them. The developer's first attempt passes each file to the KMS Encrypt API…Medium
2. Account A owns a customer managed AWS KMS key. A Lambda function in account B must call kms:Decrypt with this key to read data encrypted in account A. Which TWO actions are…Harder · choose 2
3. An S3 bucket uses default encryption with SSE-KMS and a customer managed key. A Lambda function's execution role allows s3:PutObject and s3:GetObject on the bucket, but uploads…Medium · choose 2

Study Encryption with AWS KMS

• AWS KMS concepts

More Security topics

• Amazon Cognito and federated access (3)
• IAM roles, policies and STS (3)
• API authorisation and tokens (3)
• Certificates and encryption in transit (2)
• Secrets and sensitive data (3)