Question $\frac{17}{25}$

larr Previous Next $$

Key rotation is an important concept of key management. How does Key Management Service $($KMS$)$ implement key rotation?

Select one answer

KMS supports manual Key Rotation only; you can create new keys any time you want and all data will be re$-$encrypted with the new key.

Key rotation is the process of synchronizing keys between configured regions; KMS will synchronize key changes in near$-$real time once keys are changed.

Key rotation is supported through the re$-$importing of new KMS keys; once you import a new key all data keys will be re$-$encrypted with the new KMS key.

KMS creates new cryptographic material for your KMS keys every rotation period, and uses the new keys for any upcoming encryption; it also maintains old keys to be able to decrypt data encrypted with those keys.