AWS KMS Architecture Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Encryption at Rest

What you'll be asked

  1. What is the primary purpose of a Customer Master Key (CMK) in AWS KMS?
  2. When using Envelope Encryption, what is the 'Data Encryption Key' (DEK) used for?
  3. Which of the following best describes the difference between Symmetric and Asymmetric KMS keys?
  4. An administrator needs to ensure that a KMS key can only be used by a specific service in a different AWS account. Which policy must be configured?
  5. You are implementing a multi-region key strategy. Which of the following is true regarding Multi-Region Keys in AWS KMS?

Answers and explanations come after you submit.