AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 645

Question

A company is required to use cryptographic keys in its on-premises key manager. The key manager is outside of the AWS Cloud because of regulatory and compliance requirements. The company wants to manage encryption and decryption by using cryptographic keys that are retained outside of the AWS Cloud and that support a variety of external key managers from different vendors. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Use an AWS Key Management Service (AWS KMS) external key store backed by an external key manager. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 645