AWS Certified Cloud Practitioner — Question 843

Which AWS service can a company use to securely store and encrypt passwords for a database?

Answer options

• A. AWS Shield
• B. AWS Secrets Manager
• C. AWS Identity and Access Management (IAM)
• D. Amazon Cognito

Correct answer: B

Explanation

AWS Secrets Manager is specifically designed to safely store, rotate, and encrypt database credentials, API keys, and other secrets. AWS Shield provides DDoS protection, IAM manages user access to AWS resources, and Amazon Cognito handles application user sign-up and sign-in, making them unsuitable for database password storage.