Which AWS service provides SSL/TLS certificates that can be used to encrypt data in transit between clients and an Application Load Balancer?

AWS Key Management Service (KMS)

AWS Identity and Access Management (IAM)

A healthcare company stores patient data in Amazon S3. They must comply with HIPAA and need to ensure that all data is encrypted at rest. They also need to be able to audit who has access to the encryption keys. What should they do?

Use S3 server-side encryption with a customer-provided key (SSE-C) and store the keys in AWS Secrets Manager.

Enable default encryption on the S3 bucket using SSE-S3 and enable CloudTrail for S3 management events.

Enable S3 bucket versioning and use S3 Object Lock to protect data from deletion.

Use AWS KMS with customer-managed keys (CMK) for S3 default encryption, and enable CloudTrail for KMS key usage events.

AWSCertified Solutions Architect - Professional

Domain 1Objective 2

Task 1.2: Prescribe Security Controls. SAP-C02 Practice Questions (Page 1)

Part of the Content Domain 1: Design Solutions for Organizational Complexity domain, which makes up ~25% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 4–6 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

8concepts

Questions 1–5

1foundation · easy
Which AWS service records API activity in an AWS account, providing an audit log of actions taken by users, roles, or AWS services?
Select an answer first
2foundation · easy
Which AWS service provides a managed, continuously updated set of security best practices that can be used to assess an AWS account's compliance with those practices?
Select an answer first
3foundation · easy
Which AWS service provides SSL/TLS certificates that can be used to encrypt data in transit between clients and an Application Load Balancer?
Select an answer first
4foundation · easy
Which AWS service provides on-demand access to AWS compliance reports and agreements, such as SOC, PCI, and HIPAA certifications?
Select an answer first
5application · medium
A healthcare company stores patient data in Amazon S3. They must comply with HIPAA and need to ensure that all data is encrypted at rest. They also need to be able to audit who has access to the encryption keys. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 1.2: Prescribe Security Controls. SAP-C02 Practice Questions (Page 1)

Questions 1–5

Which AWS service records API activity in an AWS account, providing an audit log of actions taken by users, roles, or AWS services?

Which AWS service provides a managed, continuously updated set of security best practices that can be used to assess an AWS account's compliance with those practices?

Which AWS service provides SSL/TLS certificates that can be used to encrypt data in transit between clients and an Application Load Balancer?

Which AWS service provides on-demand access to AWS compliance reports and agreements, such as SOC, PCI, and HIPAA certifications?

A healthcare company stores patient data in Amazon S3. They must comply with HIPAA and need to ensure that all data is encrypted at rest. They also need to be able to audit who has access to the encryption keys. What should they do?

Keep studying — Content Domain 1: Design Solutions for Organizational Complexity