Amazon Exam DVA-C02 Topic 4 Question 38 Discussion

Actual exam question for Amazon's DVA-C02 exam

Question #: 38
Topic #: 4

A developer is creating an Amazon DynamoDB table by using the AWS CLI The DynamoDB table must use server-side encryption with an AWS owned encryption key

How should the developer create the DynamoDB table to meet these requirements?

ACreate an AWS Key Management Service (AWS KMS) customer managed key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table

BCreate an AWS Key Management Service (AWS KMS) AWS managed key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table

CCreate an AWS owned key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table.

DCreate the DynamoDB table with the default encryption options

Show Suggested Answer

Suggested Answer: D

Default SSE in DynamoDB:DynamoDB tables are encrypted at rest by default using an AWS owned key (SSE-S3).

No Additional Action Needed:Creating a table without explicitly specifying a KMS key will use this default encryption.

DynamoDB Server-Side Encryption:https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Encryption

by Cathern at Sep 19, 2024, 06:28 AM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ronna

9 months ago

I'm not sure, but I think option D might be easier and quicker to implement. Default encryption could be sufficient for some cases.

upvoted 0 times

...

Huey

9 months ago

I agree with Vallie. Using a customer managed key provides more control over encryption and security.

upvoted 0 times

...

Casey

9 months ago

Wait, we're supposed to create an AWS owned key? I thought that was like a secret club that only AWS employees could access.

upvoted 0 times

...

9 months ago

Option B is the correct answer. The developer should use an AWS managed key from AWS KMS to encrypt the DynamoDB table.

upvoted 0 times

Lura

8 months ago

Option B is the correct answer. The developer should use an AWS managed key from AWS KMS to encrypt the DynamoDB table.

upvoted 0 times

...

Georgiann

9 months ago

B) Create an AWS Key Management Service (AWS KMS) AWS managed key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table

upvoted 0 times

...