AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 72

Question

A company plans to use AWS Key Management Service (AWS KMS) to implement an encryption strategy to protect data at rest. The company requires client-side encryption for company projects. The company is currently conducting multiple projects to test the company's use of AWS KMS. These tests have led to a sudden increase in the company's AWS resource consumption. The test projects include applications that issue multiple requests each second to KMS endpoints for encryption activities. The company needs to develop a solution that does not throttle the company's ability to use AWS KMS. The solution must improve key usage for client-side encryption and must be cost optimized. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Use data key caching. Use the local cache that the AWS Encryption SDK provides with a caching cryptographic materials manager.

AWS Certified Security - Specialty SCS-C02 — Question 72