Key Management Services Quiz

What you'll be asked

1. What is the primary purpose of a Key Management Service (KMS) in a cloud environment?
2. Which security best practice should be followed when dealing with master keys in a KMS?
3. If an application requires data to be encrypted locally before being sent to the cloud, which KMS feature is most relevant?
4. When configuring access control for a KMS, which principle should be strictly enforced?
5. A security auditor discovers that a KMS key was deleted, resulting in permanent data loss. Which configuration setting would have prevented this accidental deletion?

Answers and explanations come after you submit.