SCS-C02 · Question #323
When you enable automatic key rotation for an existing CMK key where the backing key is managed by AWS, after how long is the key rotated?
The correct answer is D. After 3 years. The AWS Documentation states the following AWS managed CM Ks: You cannot manage key rotation for AWS managed CMKs. AWS KMS automatically rotates AWS managed keys every three years (1095 days). Note: AWS-managed CMKs are rotated every 3yrs, Customer-Managed CMKs are rotated…
Question
When you enable automatic key rotation for an existing CMK key where the backing key is managed by AWS, after how long is the key rotated?
Options
- AAfter 30 days
- BAfter 128 days
- CAfter 365 days
- DAfter 3 years
How the community answered
(27 responses)- A7% (2)
- B11% (3)
- C4% (1)
- D78% (21)
Explanation
The AWS Documentation states the following AWS managed CM Ks: You cannot manage key rotation for AWS managed CMKs. AWS KMS automatically rotates AWS managed keys every three years (1095 days). Note: AWS-managed CMKs are rotated every 3yrs, Customer-Managed CMKs are rotated every 365-days from when rotation is enabled. Option A, B, C are invalid because the dettings for automatic key rotation is not changeable.
Topics
Community Discussion
No community discussion yet for this question.