AWS Certified Cloud Practitioner (CLF-C02) — Question 504

Which AWS service can a company use to manage encryption keys in the cloud?

Answer options

• A. AWS License Manager
• B. AWS Certificate Manager (ACM)
• C. AWS CloudHSM
• D. AWS Directory Service

Correct answer: C

Explanation

AWS CloudHSM is a cloud-based hardware security module that allows users to generate and use their own encryption keys on AWS. AWS License Manager is designed for managing software licenses, AWS Certificate Manager handles SSL/TLS certificates, and AWS Directory Service manages Active Directory, making them incorrect for key management.