Which Option for the Use of the AWS Key Management

question 141

Multiple Choice

Which option for the use of the AWS Key Management Service (KMS) supports key management best practices that focus on minimizing the potential scope of data exposed by a possible future key compromise?

• A) Use KMS automatic key rotation to replace the master key, and use this new master key for future encryption operations without re-encrypting previously encrypted data.
• B) Generate a new Customer Master Key (CMK), re-encrypt all existing data with the new CMK, and use it for all future encryption operations.
• C) Change the CMK alias every 90 days, and update key-calling applications with the new key alias.
• D) Change the CMK permissions to ensure that individuals who can provision keys are not the same individuals who can use the keys.

---

Definitions:

Throughput Time

The amount of time it takes for a product to go through the production process, from start to finish, including both processing and waiting time.

Delivery Cycle Time

The total time taken from receiving a customer order to the delivery of the product or service to the customer.

Fill Orders

The process of completing a customer's purchase request by preparing and dispatching the requested products.

External Failure Cost

Expenses incurred when a product fails to meet quality standards after being delivered to the customer, including returns, repairs, and lost sales.