Task 4.3: Ensure Data Encryption and Masking DEA-C01 Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   What is the purpose of enabling automatic key rotation for a customer master key (CMK) in AWS KMS?

   • ATo generate new cryptographic material for the CMK periodically
   • BTo automatically re-encrypt all data encrypted with the key
   • CTo delete the old key and create a new one
   • DTo replace the CMK with a new CMK every year
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A data engineer needs to mask a column of customer names in a test dataset by replacing each name with a randomly selected name from a predefined list. Which data masking technique is being used?

   • AEncryption-based masking
   • BShuffling
   • CSubstitution
   • DNulling
   Reveal Solution Discussion Select an answer first