Free SCS-C03 Web TestEngine Demo

Q35 Single choice

A security team manages a company's AWS Key Management Service (AWS KMS) customer managed keys. Only members of the security team can administer the KMS keys. The company ' s application team has a software process that needs temporary access to the keys occasionally. The security team needs to provide the application team ' s software process with access to the keys.

Which solution will meet these requirements with the LEAST operational overhead?

A
Export the KMS key material to an on-premises hardware security module (HSM). Give the application team access to the key material.
B
Edit the key policy that grants the security team access to the KMS keys by adding the application team as principals. Revert this change when the application team no longer needs access.
C
Create a key grant to allow the application team to use the KMS keys. Revoke the grant when the
application team no longer needs access.
D
Create a new KMS key by generating key material on premises. Import the key material to AWS KMS whenever the application team needs access. Grant the application team permissions to use the key.

SCS-C03 Web TestEngine demo