SCS-C02 · Question #323
SCS-C02 Question #323: Real Exam Question with Answer & Explanation
The correct answer is D: After 3 years. The AWS Documentation states the following AWS managed CM Ks: You cannot manage key rotation for AWS managed CMKs. AWS KMS automatically rotates AWS managed keys every three years (1095 days). Note: AWS-managed CMKs are rotated every 3yrs, Customer-Managed CMKs are rotated every
Question
When you enable automatic key rotation for an existing CMK key where the backing key is managed by AWS, after how long is the key rotated?
Options
- AAfter 30 days
- BAfter 128 days
- CAfter 365 days
- DAfter 3 years
Explanation
The AWS Documentation states the following AWS managed CM Ks: You cannot manage key rotation for AWS managed CMKs. AWS KMS automatically rotates AWS managed keys every three years (1095 days). Note: AWS-managed CMKs are rotated every 3yrs, Customer-Managed CMKs are rotated every 365-days from when rotation is enabled. Option A, B, C are invalid because the dettings for automatic key rotation is not changeable.
Community Discussion
No community discussion yet for this question.