Ultimate access to all questions.
In the context of AWS Encryption SDK, what is the method for managing data encryption keys after data encryption?
Explanation:
The correct answer is B. When using the AWS Encryption SDK, the data encryption key (DEK) is encrypted with a Key Encryption Key (KEK). This encrypted DEK is then stored alongside the encrypted data (ciphertext). This method allows the SDK to manage DEKs seamlessly and ensures the keys are securely stored with the data.