Customer Managed vs AWS Managed Keys Quiz

What you'll be asked

1. Which type of KMS key is automatically created, managed, and used by AWS services on your behalf, requiring no manual intervention?
2. A compliance requirement mandates that your organization must have full control over the key rotation policy and the ability to disable the key at any time. Which key type should you use?
3. When using a Customer Managed Key, what is the primary benefit of defining a custom Key Policy instead of relying on the default policy?
4. You are auditing your AWS environment and notice that an AWS Managed Key is being used for an S3 bucket. Why might you decide to migrate this to a Customer Managed Key?
5. If you import your own key material into a Customer Managed Key, what is the impact on the key's rotation policy?

Answers and explanations come after you submit.