AWS KMS Key Management Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption at Rest

What you'll be asked

  1. What is the primary purpose of AWS Key Management Service (KMS)?
  2. You have a Customer Managed Key (CMK) and need to ensure that only specific IAM users can use the key for decryption. Where should you define these permissions?
  3. If you delete a Customer Managed Key in AWS KMS, what happens to the data that was encrypted with that key?
  4. An application needs to encrypt a large file (100MB) using AWS KMS. Which approach is considered the best practice for performance and security?
  5. You are implementing a multi-region disaster recovery strategy. How can you ensure that encrypted data in Region A can be decrypted in Region B?

Answers and explanations come after you submit.