DOP-C02 · Question #71
A company uses AWS Key Management Service (AWS KMS) keys and manual key rotation to meet regulatory compliance requirements. The security team wants to be notified when any keys have not been rotated
The correct answer is C. Develop an AWS Config custom rule that publishes to an Amazon Simple Notification Service. Anyway trusted advisor cannot be used as there is no such check, also KMS does not have this action, security hub is not conducting any active checks just react to events. https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
Question
A company uses AWS Key Management Service (AWS KMS) keys and manual key rotation to meet regulatory compliance requirements. The security team wants to be notified when any keys have not been rotated after 90 days. Which solution will accomplish this?
Options
- AConfigure AWS KMS to publish to an Amazon Simple Notification Service (Amazon SNS) topic
- BConfigure an Amazon EventBridge event to launch an AWS Lambda function to call the AWS
- CDevelop an AWS Config custom rule that publishes to an Amazon Simple Notification Service
- DConfigure AWS Security Hub to publish to an Amazon Simple Notification Service (Amazon SNS)
How the community answered
(49 responses)- A4% (2)
- B14% (7)
- C73% (36)
- D8% (4)
Explanation
Anyway trusted advisor cannot be used as there is no such check, also KMS does not have this action, security hub is not conducting any active checks just react to events. https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
Topics
Community Discussion
No community discussion yet for this question.