Correct Answer: Enable Automatic Key Rotation (yearly)
AWS Key Vault supports Automatic Key Rotation for customer-managed KMS keys, which automatically rotates the underlying key material on a yearly basis without modifying the Key ID....
Correct Answer
Enable Automatic Key Rotation (yearly)
Why This Answer Is Correct
AWS Key Vault supports Automatic Key Rotation for customer-managed KMS keys, which automatically rotates the underlying key material on a yearly basis without modifying the Key ID.
This question evaluates your knowledge of AWS KMS — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding AWS KMS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is AWS Key Management Service (KMS) used for?
What is a 'Customer Master Key' (CMK) in AWS KMS?
Which encryption type is supported by AWS KMS for data keys?
What is the difference between an 'AWS Managed Key' and a 'Customer Managed Key'?