Review questions

1. A new set of compliance regulations has come down from the security department in the company you are working for. They are now stating that all encryption keys must be rotated every 12 months without exceptions. Which one of the following options would not meet the proposed new guidelines?

   a. Using imported key material with a CMK

   b. Using an AWS-managed key

   c. Using an AWS customer-managed symmetric CMK

   d. Using an AWS customer-managed asymmetric CMK

2. You have been brought into a company that is working with confidential data. However, they are transferring the data unencrypted, both on the Amazon administrative console and using the CLI. What steps can you take to immediately secure the transport of data using encryption?

   a. Create a set of CMKs in KMS. Using envelope encryption, have each user encrypt each transaction before any CLI command.

   b. Use ACM to create a certificate to create a secure login and encrypt transmissions to the Amazon administrative...