SAP-C02 Design for New Solutions Practice Question
A company is designing a new application that will process sensitive financial data. They need to ensure encryption at rest and in transit. Which of the following should they use? (Select TWO.)
⚠ Common exam trap
Test-takers frequently confuse SSL/TLS certificates (which are just cryptographic containers) with the actual encryption protocol (TLS), and they mistakenly think ACM or IAM directly perform encryption instead of managing certificates or access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TLS for all data in transit
TLS (Transport Layer Security) is the industry-standard protocol for encrypting data in transit, ensuring confidentiality and integrity between client and server. AWS services like ELB, CloudFront, and API Gateway enforce TLS for all communications, making it the correct choice for securing data in transit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
TLS for all data in transit
Why this is correct
TLS encrypts data in transit.
- ✗
AWS Certificate Manager (ACM) for all encryption
Why it's wrong here
ACM provides certificates, not encryption at rest.
- ✗
SSL certificates for all connections
Why it's wrong here
TLS is the modern standard, SSL is deprecated.
- ✓
AWS Key Management Service (KMS) for encryption at rest
Why this is correct
KMS manages encryption keys for at-rest encryption.
- ✗
AWS Identity and Access Management (IAM) for data encryption
Why it's wrong here
IAM controls access, not encryption.
Go deeper
Related to this question
About these practice questions
This SAP-C02 question is part of Courseiva's 1,660-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.