AWS Certified Cloud Practitioner (AWS CCP) Practice Test Set 1: Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO)

Question

Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO)

Sarahmarie Hollenstein · Accepted Answer

Both AWS KMS and AWS CloudHSM can be used to generate data encryption keys. You use what are called customer master keys (CMKs) to create data encryption keys. The data encryption keys can then be used to actually encrypt the data

Sarahmarie Hollenstein · Answer

"AWS CIoudHSM"

Sarahmarie Hollenstein · Answer

"AWS Key Management Service (AWS KMS)"