Correct Answer: To create and manage cryptographic keys to encrypt your data
KMS is a managed service that makes it easy to create and control encryption keys....
Correct Answer
To create and manage cryptographic keys to encrypt your data
Why This Answer Is Correct
KMS is a managed service that makes it easy to create and control encryption keys.
This question evaluates your knowledge of AWS KMS — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding AWS KMS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is a 'Customer Master Key' (CMK) in AWS KMS?
Which encryption type is supported by AWS KMS for data keys?
What is the difference between an 'AWS Managed Key' and a 'Customer Managed Key'?
Which AWS service provides detailed logs showing exactly when and by whom a KMS key was used to encrypt or decrypt data?