A company’s security team requires that all data stored in the cloud be encrypted at rest at all times using encryption keys stored on-premises.

Which encryption options meet these requirements? (Select TWO.)

Use Server-Side Encryption with Amazon S3 Managed Keys (SSE-S3).
Use Server-Side Encryption with AWS KMS Managed Keys (SSE-KMS).
Use Server-Side Encryption with Customer Provided Keys (SSE-C).
Use client-side encryption to provide at-rest encryption.
Use an AWS Lambda function triggered by Amazon S3 events to encrypt the data using the customer’s keys.

Reader Interactions