Which statement correctly describes a difference between client-side and server-side encryption?

Client-side encryption is less secure than server-side encryption.

Client-side encryption is performed by the storage service, while server-side encryption is performed by the client application.

Client-side encryption requires the client to manage encryption keys, while server-side encryption is managed by the service.

Client-side encryption is used only for data in transit, while server-side encryption is used only for data at rest.

A company operates a private API that is only accessible within its VPC. The API must use TLS, but the company does not want to use publicly trusted certificates. Which approach should the developer take?

Use a self-signed certificate generated on the API server.

Disable TLS and rely on the VPC security group for protection.

Use AWS Certificate Manager to request a public certificate for the API.

Use AWS Private CA to issue a private certificate and configure the API to use it.

AWSCertified Developer - Associate

Domain 2Objective 2

Task 2: Implement Encryption by Using AWS Services DVA-C02 Practice Questions (Page 3)

Part of the Content Domain 2: Security domain, which accounts for 26% of the DVA-C02 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

7concepts

26%of the exam

Questions 11–15

11foundation · easy
A developer is building an application that must encrypt sensitive data before it is sent to an API. The API will store the encrypted data without ever having access to the plaintext. Which encryption approach should the developer use?
Select an answer first
12foundation · easy
A developer has encrypted data using an AWS KMS key and needs to decrypt it programmatically. Which AWS KMS API operation should the developer use?
Select an answer first
13foundation · easy
Which statement correctly describes a difference between client-side and server-side encryption?
Select an answer first
14foundation · easy
Which AWS KMS feature is used to allow an IAM principal in another AWS account to use a KMS key?
Select an answer first
15application · medium
A company operates a private API that is only accessible within its VPC. The API must use TLS, but the company does not want to use publicly trusted certificates. Which approach should the developer take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DVA-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DVA-C02” is a trademark of its owner, used for identification only.

Task 2: Implement Encryption by Using AWS Services DVA-C02 Practice Questions (Page 3)

Questions 11–15

A developer is building an application that must encrypt sensitive data before it is sent to an API. The API will store the encrypted data without ever having access to the plaintext. Which encryption approach should the developer use?

A developer has encrypted data using an AWS KMS key and needs to decrypt it programmatically. Which AWS KMS API operation should the developer use?

Which statement correctly describes a difference between client-side and server-side encryption?

Which AWS KMS feature is used to allow an IAM principal in another AWS account to use a KMS key?

A company operates a private API that is only accessible within its VPC. The API must use TLS, but the company does not want to use publicly trusted certificates. Which approach should the developer take?

Keep studying — Content Domain 2: Security