Exam AWS Certified Security - Specialty topic 1 question 279 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 279
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A development team is using an AWS Key Management Service (AWS KMS) CMK to try to encrypt and decrypt a secure string parameter from AWS Systems
Manager Parameter Store. However, the development team receives an error message on each attempt.
Which issues that are related to the CMK could be reasons for the error? (Choose two.)

A. The CMK is used in the attempt does not exist.
B. The CMK is used in the attempt needs to be rotated.
C. The CMK is used in the attempt is using the CMK's key ID instead of the CMK ARN.
D. The CMK is used in the attempt is not enabled.
E. The CMK is used in the attempt is using an alias.

Show Suggested Answer

Suggested Answer: AD 🗳️

by stamford at Aug. 25, 2021, 9:16 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

dumma

Highly Voted 3 years, 8 months ago

A and D

upvoted 16 times

...

Raphaello

Most Recent 1 year, 3 months ago

Selected Answer: AD

KMS key is either disabled, or does not exist. AD.

upvoted 1 times

...

Tofu13

2 years ago

Selected Answer: AD

Also worth mentioning that KMS key ID & ARN (C) and alias (E) are all valid methods to identify the key in question. https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html

upvoted 3 times

...

vikaswalajay

2 years, 8 months ago

Selected Answer: AD

full house

upvoted 2 times

...

sapien45

2 years, 9 months ago

Selected Answer: AD

Most of the Parameter Store failures related to KMS keys are caused by the following problems: The KMS key is not found.This typically happens when you use an incorrect identifier for the KMS key. The KMS key is not enabled. When this occurs, Parameter Store returns an InvalidKeyId exception with a detailed error message from AWS KMS.

upvoted 2 times

...