5.q

Lesson 5 Quiz

Questions

1) Which CLI command do you run to determine whether a key is AWS managed or Customer managed?

A. aws kms describe-keys

B. aws kms list-keys

C. aws kms list-aliases

D. aws kmsapi describe-keys

2) Which CloudFormation AWS::KMS::Key property do you use to automatically rotate a KMS key?

A. EnableKeyRotation: true

B. AutoKeyRotation: true

C. RotateKey: true

D. EnableAutoRotation: true

3) What is the name of AWS managed key when encrypting a DynamoDB database in CloudFormation?

A. KMSMasterKeyId: dynamodb

B. KMSMasterKeyId: aws/dynamodb

C. KMSMasterKeyId: alias/aws/dynamodb

D. MasterKeyId: alias/aws/dynamodb