Question $21/25$

larr Previous Next $$

What is the difference between default and custom KMS key stores?

Select one answer

Default key stores secure KMS keys within an S$3$ bucket but custom key stores secure KMS keys within a CloudHSM device.

Default key stores secure KMS keys within an AWS$-$managed HSM device, while custom key stores secure KMS keys within a CloudHSM device.

Both default and custom key stores secure KMS keys in AWS$-$managed HSM devices, but custom key stores allow key material to be stored in CloudHSM devices.

Both default and custom key stores secure KMS keys in AWS$-$managed HSM devices, but custom key stores allow users to create customer$-$managed KMS keys.

Review later