AWS Certified Cloud Practitioner — Question 49

Which AWS service can be used to encrypt data at rest?

Answer options

• A. Amazon GuardDuty
• B. AWS Shield
• C. AWS Security Hub
• D. AWS Key Management Service (AWS KMS)

Correct answer: D

Explanation

AWS Key Management Service (AWS KMS) is specifically designed for managing cryptographic keys and encrypting data at rest. The other options, such as Amazon GuardDuty, AWS Shield, and AWS Security Hub, focus on security monitoring and protection rather than data encryption.