SOA-C02 · Question #217
A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every…
The correct answer is B. Create a new CMK with new imported material, and update the key alias to point to the new. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new KMS key and mapping an existing key alias from the old KMS key to the new KMS key. https://aws.amazon.com/kms/faqs/
Question
A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months. What is the process to rotate the key?
Options
- AEnable automatic key rotation for the CMK, and specify a period of 6 months.
- BCreate a new CMK with new imported material, and update the key alias to point to the new
- CDelete the current key material, and import new material into the existing CMK.
- DImport a copy of the existing key material into a new CMK as a backup, and set the rotation
How the community answered
(17 responses)- A6% (1)
- B76% (13)
- C6% (1)
- D12% (2)
Explanation
If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new KMS key and mapping an existing key alias from the old KMS key to the new KMS key. https://aws.amazon.com/kms/faqs/
Topics
Community Discussion
No community discussion yet for this question.