AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 472

Question

A developer manages encryption keys in AWS Key Management Service (AWS KMS). The developer must ensure that all encryption keys can be deleted immediately when the keys are no longer required. The developer wants a solution that is highly available and does not require manual management for compute infrastructure. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Use customer managed keys with imported key material. When the keys are no longer required, delete the imported key material. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Developer - Associate DVA-C02 — Question 472