1. Home
2. All questions
3. Question 57

AWS Certified Solutions Architect study material · question 57 of 500

After automatic rotation replaces a customer managed key's material, what happens to data encrypted before the rotation?

• Secure architecture

1. It must be re-encrypted with the new material
2. It becomes unreadable until the old material is restored
3. It decrypts only if the application names the old key version
4. It still decrypts, because KMS selects the material that encrypted it

Challenge yourself on this topic → Study as cards