Key Policies and Grants Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption at Rest

What you'll be asked

  1. What is the primary purpose of a Key Policy in the context of encryption at rest?
  2. When configuring a key policy, what is the 'Principle of Least Privilege'?
  3. You have an application that needs to encrypt data in a database but should never be allowed to decrypt it. How should you configure the key policy?
  4. What is the primary difference between a Key Policy and an IAM Policy when granting access to encryption keys?
  5. If a Key Policy contains an explicit 'Deny' statement for a specific user, but an IAM policy grants that user 'Allow' access, what is the result?

Answers and explanations come after you submit.