C_SEC_2405 · Question #86
What does SAP Key Management Service (KMS) do to secure cryptographic keys? Note: There are 3 correct answers to this question.
The correct answer is B. Store keys C. Rotate keys E. Generate keys. SAP Key Management Service (KMS) performs three core functions: generating cryptographic keys (E), storing them securely in a centralized vault (B), and rotating them on a schedule to limit exposure if a key is compromised (C). These three actions form the complete lifecycle…
Question
What does SAP Key Management Service (KMS) do to secure cryptographic keys? Note: There are 3 correct answers to this question.
Options
- AConceal keys
- BStore keys
- CRotate keys
- DTransmit keys
- EGenerate keys
How the community answered
(54 responses)- A7% (4)
- B80% (43)
- D13% (7)
Explanation
SAP Key Management Service (KMS) performs three core functions: generating cryptographic keys (E), storing them securely in a centralized vault (B), and rotating them on a schedule to limit exposure if a key is compromised (C). These three actions form the complete lifecycle management loop that KMS is specifically designed to handle.
Why the distractors are wrong:
- A (Conceal keys): KMS doesn't "conceal" keys as a distinct function - secure storage already implies restricted access. "Concealment" isn't a formal cryptographic management operation.
- D (Transmit keys): KMS is not a key distribution or transport service. Transmitting keys is outside its scope; it manages keys at rest and their lifecycle, not their delivery over a network.
Memory tip: Think of KMS as the "GSR" vault - it Generates, Stores, and Rotates keys. If a verb sounds like something a courier or a spy does (transmit, conceal), it's probably not KMS.
Topics
Community Discussion
No community discussion yet for this question.