SCS-C02 › Data Protection
Data Protection covers encryption at rest and in transit, KMS key policies and grants, ACM certificate management, S3 bucket policies and Object Lock, and Secrets Manager rotation. SCS-C02 tests these through scenario questions: choosing between SSE-KMS and SSE-S3, troubleshooting AccessDenied from key policies, enforcing TLS with aws:SecureTransport, and designing cross-account key access.
SCS-C02 Data Protection — All 321 Questions
Every question in this domain with answers and detailed explanations.