AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 205

Question

A company has an AWS Key Management Service (AWS KMS) customer managed key with imported key material. Company policy requires all encryption keys to be rotated every year. What should a security engineer do to meet this requirement for this customer managed key?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a new customer managed key. Import new key material to the new key. Point the key alias to the new key.

AWS Certified Security - Specialty SCS-C02 — Question 205