Q30 — AWS DVA-C02 Ch.3

Question 30 of 100 | ← Chapter 3

A developer is using the AWS CLI to create an Amazon DynamoDB table. The DynamoDB table must use AWS-owned encryption keys for server-side encryption. How should the developer create the DynamoDB table to meet these requirements?

• A. Create an AWS Key Management Service (AWS KMS) customer-managed key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyId parameter when creating the DynamoDB table.
• B. Create an AWS Key Management Service (AWS KMS) AWS-managed key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyId parameter when creating the DynamoDB table.
• C. Create an AWS-owned key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyId parameter when creating the DynamoDB table.
• D. Create the DynamoDB table using the default encryption option. ✓

Correct Answer: D. Create the DynamoDB table using the default encryption option.

Explanation

For this scenario, the developer can use the DynamoDB table’s default encryption option, which automatically applies server-side encryption using AWS-owned encryption keys. No manual key creation or specification is required. 【Lantern Certification provided by: swufelp1999】