AWS Certified SysOps Administrator SOA-C01 – Question472

What does the Server-side encryption provide in Amazon S3?

A. Server-side encryption doesn't exist for Amazon S3, but only for Amazon EC2.
B. Server-side encryption protects data at rest using Amazon S3-managed encryption keys (SSE-S3).
C. Server-side encryption provides an encrypted virtual disk in the cloud.
D. Server-side encryption allows to upload files using an SSL endpoint for a secure transfer.

Correct Answer: B

Explanation:

Explanation: Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3-managed encryption keys (SSE-S3) employs strong multi-factor encryption. Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates. Reference:
http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncry…