Encryption Strategies with KMS and ACM Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Controls

What you'll be asked

  1. Which AWS service is primarily used to manage SSL/TLS certificates for web servers and integrated services like Elastic Load Balancing?
  2. When using AWS KMS, what is the primary difference between a Customer Managed Key (CMK) and an AWS Managed Key?
  3. An organization needs to encrypt data in S3 but must maintain full control over the lifecycle of the encryption keys, including the ability to audit key usage and rotate keys manually. Which approach should they use?
  4. A developer is configuring an application to use ACM certificates. Why would the developer be unable to export a private key from an ACM-issued certificate?
  5. In a scenario involving envelope encryption, what is the purpose of the Data Encryption Key (DEK) compared to the Root Key (or Key Encryption Key)?

Answers and explanations come after you submit.