Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS KMS

AWS KMS is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data....

📋Part of AWS Certified Advanced Networking – Specialty (ANS-C01) · AWS Certification Practice

Real Exam ScenarioAWS KMS

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

✓ Correct Answer & ExplanationAWS KMS

Correct Answer

AWS KMS

Why This Answer Is Correct

AWS KMS is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.

📚 What This Question Tests

This question evaluates your knowledge of AWS KMS — a core concept tested in AWS Certified Advanced Networking – Specialty (ANS-C01). Understanding AWS KMS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All AWS Certified Advanced Networking – Specialty (ANS-C01) Questions →Browse All AWS Exams →

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

📚 What This Question Tests

More AWS KMS Practice Questions