Timed Exam Set 1 – Explanation for answer is incorrect

[AJam]

Hi.

The explanation for the following question is incorrect.

A Security Administrator manages different types of KMS keys that are used by their cloud resources in AWS. The Administrator tried to enable automatic key rotation for all of the KMS keys. Some keys were successfully configured, but some failed.

Which of the following are the possible reasons why the failure occurred? (Select THREE.)

(view) 1 0 1 00:01:49
Asymmetric KMS keys do not support automatic key rotation.
Customer-managed KMS keys do not support automatic key rotation.
KMS keys in custom key stores do not support automatic key rotation.
AWS managed KMS keys do not support automatic key rotation.
KMS keys that have imported key material do not support automatic key rotation.
Symmetric KMS keys do not support automatic key rotation.

Explanation states the following:

The option that says: AWS managed KMS keys do not support automatic key rotation is incorrect because you can actually enable automatic key rotation on your AWS managed keys. AWS KMS automatically rotates AWS managed KMS keys every year (365 days).

This is not correct – you CANNOT enable/disable automate key rotation for AWS managed KMS keys (this is only possible for Customer managed KMS keys).

Explanation is provided here under “AWS managed keys” https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html

Please update the explanation to remove confusion. Thanks.

[Neil-TutorialsDojo]

Hi AJam,

Thank you for bringing this to our attention.

We appreciate your diligence in ensuring accuracy, and we will promptly update the explanation to reflect this correction. Please feel free to reach out if you have any further questions or concerns.

Regards,

Neil @ Tutoriasl Dojo