Correct Answer: Customer Managed Keys give you full control over rotation and access policies
Customer Managed Keys are created by you and offer the highest level of control and auditing....
Correct Answer
Customer Managed Keys give you full control over rotation and access policies
Why This Answer Is Correct
Customer Managed Keys are created by you and offer the highest level of control and auditing.
This question evaluates your knowledge of AWS KMS — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding AWS KMS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is AWS Key Management Service (KMS) used for?
What is a 'Customer Master Key' (CMK) in AWS KMS?
Which encryption type is supported by AWS KMS for data keys?
Which AWS service provides detailed logs showing exactly when and by whom a KMS key was used to encrypt or decrypt data?