You are planning on using the AWS KMS service for managing keys for your application. For which of the following can the KMS CMK keys be used for encrypting? Choose 2 answers from the options given…

The correct answer is C. Password D. RSA Keys. The CMK keys themselves can only be used for encrypting data that is maximum 4KB in size. Hence it can be used for encryptii information such as passwords and RSA keys. Option A and B are invalid because the actual CMK key can only be used to encrypt small amounts of data and…

Submitted by kevin_r· Mar 6, 2026Data Protection

Question

You are planning on using the AWS KMS service for managing keys for your application. For which of the following can the KMS CMK keys be used for encrypting? Choose 2 answers from the options given below

Options

AImage Objects
BLarge files
CPassword
DRSA Keys

How the community answered

(29 responses)

A
7% (2)
B
17% (5)
C
76% (22)

Explanation

The CMK keys themselves can only be used for encrypting data that is maximum 4KB in size. Hence it can be used for encryptii information such as passwords and RSA keys. Option A and B are invalid because the actual CMK key can only be used to encrypt small amounts of data and not large amoui of data. You have to generate the data key from the CMK key in order to encrypt high amounts of data. https://docs.aws.amazon.com/kms/latest/developereuide/concepts.html

Topics

#KMS CMK#encryption scope#key management#small data encryption

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice