You have a customer master key (CMK) in AWS KMS, and you need to use the AWS KMS Encrypt CLI command to encrypt plaintext into ciphertext with the CMK. Which of the following options can you encrypt with the AWS Encrypt CLI command? (Select TWO.)

Answer options:

A.Image Objects (1MB)
B.Large files (2GB)
C.Password
D.RSA Keys

Answer – C and D
With the AWS KMS Encrypt CLI command, you can directly encrypt small amounts of arbitrary data that is less than 4k, such as a personal identifier or database password.
Options A and B are incorrect because the files` size would be bigger than 4k, and it is unsuitable to use AWS KMS Encrypt CLI.
For more information on the concepts for KMS, please visit the following URL:
https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html