AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 84

Question

A security engineer must use AWS Key Management Service (AWS KMS) to design a key management solution for a set of Amazon Elastic Block Store (Amazon EBS) volumes that contain sensitive data. The solution needs to ensure that the key material automatically expires in 90 days. Which solution meets these criteria?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: A customer managed key that uses customer provided key material.

AWS Certified Security - Specialty SCS-C02 — Question 84