Courseiva
← DBS-C01
Full test
Database Security →easyMultiple ChoiceObjective-mapped

DBS-C01 Database Security Practice Question

A company has an Amazon DynamoDB table with a global secondary index (GSI). The security team wants to ensure that the table and the GSI are encrypted at rest. How can this be achieved?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Nothing; DynamoDB encrypts all data at rest by default.

DynamoDB encrypts all tables and GSIs at rest by default. Option B is wrong because encryption is always on. Option C is wrong because encryption cannot be disabled. Option D is wrong because GSIs are automatically encrypted with the table.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Nothing; DynamoDB encrypts all data at rest by default.

    Why this is correct

    DynamoDB tables and GSIs are encrypted at rest by default.

  • ✗

    Create the table with encryption disabled to avoid performance impact.

    Why it's wrong here

    Encryption cannot be disabled.

  • ✗

    Enable encryption at rest on the table and the GSI separately.

    Why it's wrong here

    Encryption is automatically applied to both.

  • ✗

    Enable encryption on the GSI using a KMS key.

    Why it's wrong here

    Encryption is automatically managed; you cannot separately encrypt a GSI.

About these practice questions

Courseiva writes every DBS-C01 question from scratch — 1,663 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.