Skip to content
SCS-C03
Data Protection
easy
Question 7 of 36

A team stores database credentials in AWS Secrets Manager and wants to avoid extra KMS key charges unless custom key control is required. Which encryption option should the team choose?

AA customer managed KMS key in every Region
BThe AWS managed key aws/secretsmanager
CAn AWS owned key that the team can edit
DAn AWS CloudHSM cluster

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion