A Company Is Using an AWS KMS Customer Master Key

question 25

Multiple Choice

A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months. What is the process to rotate the key?

• A) Enable automatic key rotation for the CMK, and specify a period of 6 months.
• B) Create a new CMK with new imported material, and update the key alias to point to the new CMK.
• C) Delete the current key material, and import new material into the existing CMK.
• D) Import a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months.

---

Definitions:

Material Alteration

A significant change to a document or agreement that affects its legal obligations or rights.

Unauthorized Acquisition

Obtaining assets, data, or information without permission from the rightful owner or authority, which may involve breaches of security or law.

Dishonored

Refused; specifically, a payment that has been refused despite a holder presenting an instrument in a timely and proper manner.

Holder in Due Course

A legal term referring to a person who has acquired a negotiable instrument in good faith and for value, and thus has certain protections against defenses and claims that could be raised by prior parties.