MENU
A developer is creating an Amazon DynamoDB table by using the AWS CLI The DynamoDB table must use server-side encryption with an AWS owned encryption key
How should the developer create the DynamoDB table to meet these requirements?
Suggested Answer: D
Get Premium DVA-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Default SSE in DynamoDB:DynamoDB tables are encrypted at rest by default using an AWS owned key (SSE-S3).
No Additional Action Needed:Creating a table without explicitly specifying a KMS key will use this default encryption.
27 comments · newest first
TU
Tuyet
11 months ago
I'm not sure about B, isn't that for customer managed keys?
JU
Julie
11 months ago
Totally agree with D, it's the simplest approach!
AD
Adell
11 months ago
Wait, does anyone actually use AWS owned keys? Seems risky.
VI
Vi
11 months ago
I think A is better, you need a managed key for more control.
BE
Bernadine
12 months ago
Option D is the way to go for default encryption!
VE
Verona
12 months ago
I vaguely recall that using a customer managed key requires more setup, so I don't think option A is what we're looking for here.
AL
Aleisha
1 year ago
I practiced a similar question where we had to choose between managed and owned keys, and I think the default encryption options could be a safe bet. That might be option D.
NO
Nohemi
1 year ago
I'm a bit unsure about the KMS options. I feel like I might have mixed up managed and owned keys in my study notes.
DE
Denna
1 year ago
I remember that AWS owned keys are automatically managed by AWS, so I think option C might be the right choice.
KR
Kristel
1 year ago
Hmm, this is a tricky one. I'm leaning towards option A, since it mentions using a customer managed key. But I'll need to re-read the question to make sure that's what they're looking for.
SA
Sang
1 year ago
I'm pretty confident that option B is the correct answer. The question states we need to use an AWS managed key, and that's what option B describes.
LA
Lashaunda
1 year ago
I'm a bit confused here. Do I need to create a custom KMS key, or can I just use the default encryption options? I'll have to double-check the details.
AU
Audry
1 year ago
Okay, I think I've got this. The key is that the table needs to use server-side encryption with an AWS owned encryption key, so option C seems like the right choice.
TA
Tammara
1 year ago
Hmm, this one looks tricky. I'll need to carefully read through the options and think about the requirements.
CA
Carman
1 year ago
Okay, let me see. I think option C sounds right - a warning with a countdown before the session times out. But I'm not 100% confident on that.
RO
Ronna
2 years ago
I'm not sure, but I think option D might be easier and quicker to implement. Default encryption could be sufficient for some cases.
HU
Huey
2 years ago
I agree with Vallie. Using a customer managed key provides more control over encryption and security.
CA
Casey
2 years ago
Wait, we're supposed to create an AWS owned key? I thought that was like a secret club that only AWS employees could access.
SH
Sheridan
2 years ago
Haha, this question is a real brain-teaser. I bet the developer is wishing they had a crystal ball right about now.
BE
Benton
2 years ago
C) Create an AWS owned key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table.
DA
Dannie
2 years ago
B) Create an AWS Key Management Service (AWS KMS) AWS managed key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table
RA
Raina
2 years ago
A) Create an AWS Key Management Service (AWS KMS) customer managed key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table
VA
Vallie
2 years ago
I think the developer should choose option A and create a customer managed key for server-side encryption.
PH
Phuong
2 years ago
I'm not so sure about that. Isn't it better to use a customer managed key from AWS KMS? That way, you have more control over the encryption.
BE
Belen
2 years ago
Option B is the correct answer. The developer should use an AWS managed key from AWS KMS to encrypt the DynamoDB table.
LU
Lura
2 years ago
Option B is the correct answer. The developer should use an AWS managed key from AWS KMS to encrypt the DynamoDB table.
GE
Georgiann
2 years ago
B) Create an AWS Key Management Service (AWS KMS) AWS managed key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table