AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 216

Question

A company runs a cron job on an Amazon EC2 instance on a predefined schedule. The cron job calls a bash script that encrypts a 2 KB file. A security engineer creates an AWS Key Management Service (AWS KMS) customer managed key with a key policy. The key policy and the EC2 instance role have the necessary configuration for this job. Which process should the bash script use to encrypt the file?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Use the aws kms encrypt command to encrypt the file by using the existing KMS key. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Security - Specialty SCS-C02 — Question 216