SAA-C03 · Question #390
SAA-C03 Question #390: Real Exam Question with Answer & Explanation
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #390. The question stem and answer options stay visible for context.
Question
A company must follow strict regulations for the management of data encryption keys. The company manages its own key externally and imports the key into AWS Key Management Service (AWS KMS). The company must control the imported key material and must rotate the key material on a regular schedule. A solutions architect needs to import the key material into AWS KMS and rotate the key without interrupting applications that use the key. Which solution will meet these requirements?
Options
- ACreate a new AWS KMS key that has the same key ID as the existing key. Import new key
- BSchedule the existing AWS KMS key for deletion. Create a new KMS key that has new key
- CImport new key material into the existing AWS KMS key. Set an expiration time for the old key
- DEnable automatic key rotation for the existing AWS KMS key.
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.