A developer wants to automatically rotate the key material of an AWS KMS key every year. What is the correct way to enable automatic rotation for a customer managed key?

Use the AWS KMS console to enable automatic rotation for the key

Use an AWS Lambda function to rotate the key material

Enable automatic rotation in the AWS Organizations console

Create a new key and update the application to use it every year

What is the implication of disabling automatic rotation for a customer managed KMS key?

The key will no longer be able to encrypt new data.

The key material will no longer be rotated automatically, but the key will continue to work for encryption and decryption.

The key will be immediately deleted.

The key will be automatically disabled after 30 days.

A developer is configuring a KMS customer managed key for a new application. The compliance team requires that the key be rotated automatically every year. What should the developer do?

Manually rotate the key by creating a new key and updating the application.

Enable automatic rotation on the KMS key.

Use an AWS managed key instead of a customer managed key.

Disable automatic rotation and rely on the key's default behavior.

AWSCertified Developer - Associate

Domain 2Objective 2

Task 2: Implement Encryption by Using AWS Services DVA-C02 Practice Questions (Page 2)

Part of the Content Domain 2: Security domain, which accounts for 26% of the DVA-C02 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

7concepts

26%of the exam

Questions 6–10

6foundation · easy
A developer wants to automatically rotate the key material of an AWS KMS key every year. What is the correct way to enable automatic rotation for a customer managed key?
Select an answer first
7foundation · easy
What is the implication of disabling automatic rotation for a customer managed KMS key?
Select an answer first
8foundation · easy
A developer needs to generate an SSH key pair for use in development and testing. Which command-line tool is commonly used to generate an SSH key pair?
Select an answer first
9application · easy
A developer is configuring a KMS customer managed key for a new application. The compliance team requires that the key be rotated automatically every year. What should the developer do?
Select an answer first
10foundation · easy
A developer needs to generate a self-signed certificate for local development testing. Which command-line tool is commonly used to generate a self-signed certificate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DVA-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DVA-C02” is a trademark of its owner, used for identification only.

Task 2: Implement Encryption by Using AWS Services DVA-C02 Practice Questions (Page 2)

Questions 6–10

A developer wants to automatically rotate the key material of an AWS KMS key every year. What is the correct way to enable automatic rotation for a customer managed key?

What is the implication of disabling automatic rotation for a customer managed KMS key?

A developer needs to generate an SSH key pair for use in development and testing. Which command-line tool is commonly used to generate an SSH key pair?

A developer is configuring a KMS customer managed key for a new application. The compliance team requires that the key be rotated automatically every year. What should the developer do?

A developer needs to generate a self-signed certificate for local development testing. Which command-line tool is commonly used to generate a self-signed certificate?

Keep studying — Content Domain 2: Security