You are using AWS DynamoDB as a database to save sales data for a global appliance company. Which of the following keys can be used to encrypt the DynamoDB data at rest? (Select TWO)

Answer options:

A.A customer managed CMK in KMS
B.AWS managed CMK (aws/rds)
C.AWS managed CMK (aws/dynamoDB)
D.Server side default encryption key (aws/s3)

Correct Answer – A, C
For DynamoDB, you can select an option to encrypt some or all of your tables under a customer-managed CMK or the AWS managed CMK in your account.
For more information on AWS KMS, refer to the following URL-
https://docs.aws.amazon.com/kms/latest/developerguide/services-dynamodb.html