Instiq

5Data Protection

Practice questions →Glossary →
  • 5.1KMS and Encryption

    Understand at-rest encryption core—KMS, CMK (customer-managed keys), envelope encryption, key policies, key rotation, and CloudHSM. Manage keys securely and encrypt data.

  • 5.2Secrets Management and Encryption in Transit

    Understand protecting credentials and traffic—Secrets Manager (auto-rotation), Parameter Store (SecureString), TLS/ACM, and certificate management. Handle secrets and traffic securely.

  • 5.3Protecting Storage and Database Data

    Understand protecting stores—S3 encryption (SSE-S3/SSE-KMS/DSSE), S3 public-access block/bucket policies, EBS/RDS encryption, backup protection, and data lifecycle. Store data securely.

  • 5.4In-scope services for data protection

    A roundup of in-scope SCS-C03 services for data protection.