SCS-C03 · Question #7
SCS-C03 Question #7: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #7. The question stem and answer options stay visible for context.
Question
A security team manages a company's AWS Key Management Service (AWS KMS) customer managed keys. Only members of the security team can administer the KMS keys. The company's application team has a software process that needs temporary access to the keys occasionally. The security team needs to provide the application team's software process with access to the keys. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AExport the KMS key material to an on-premises hardware security module (HSM). Give the
- BEdit the key policy that grants the security team access to the KMS keys by adding the application
- CCreate a key grant to allow the application team to use the KMS keys. Revoke the grant when the
- DCreate a new KMS key by generating key material on premises. Import the key material to AWS
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.