Exams / SAA-C03 / Encryption at rest and in transit

Encryption at rest and in transit: SAA-C03 practice questions

2 free questions on Encryption at rest and in transit, from the Design Secure Architectures domain (30% of the SAA-C03 exam guide). Every question is original and explains why each option is right or wrong.

Questions

1. A small charity's donation website runs on Amazon EC2 instances behind an Application Load Balancer and is served over HTTP only. Browsers now warn visitors that the site is not…Easier
2. A company's security policy says that every Amazon EBS volume created from now on must be encrypted with one of the company's own AWS KMS customer managed keys. Developers create…Medium

Study Encryption at rest and in transit

• What is AWS Certificate Manager?
• AWS Key Management Service

More Design Secure Architectures topics

• IAM roles and policies (3)
• S3 encryption (1)
• Security groups and network ACLs (3)
• Secrets management (2)
• Multi-account governance and auditing (2)
• S3 access control (2)
• Edge protection with AWS WAF and Shield (1)
• Threat detection and data discovery (2)
• Application user sign-in (1)