AWS KMS Encryption Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Data Protection

What you'll be asked

  1. What is the primary purpose of AWS Key Management Service (KMS)?
  2. When using a Customer Managed Key (CMK), what is the primary benefit of the Key Policy?
  3. Which AWS service feature allows you to perform cryptographic operations without the plaintext key ever leaving the hardware security module (HSM)?
  4. An application needs to encrypt a large file (10GB). What is the recommended approach using AWS KMS?
  5. You have a multi-region application that requires consistent encryption/decryption across two different AWS regions. What is the most efficient KMS configuration to achieve this?

Answers and explanations come after you submit.