AWS Certified Solutions Architect – Professional SAP-C01 – Question382 - AWS Certified Solutions Architect

Which of the following is true of Amazon EBS encryption keys?

A. Amazon EBS encryption uses the Customer Master Key (CMK) to create an AWS Key Management Service (AWS KMS) master key.
B. Amazon EBS encryption uses the EBS Magnetic key to create an AWS Key Management Service (AWS KMS) master key.
C. Amazon EBS encryption uses the EBS Magnetic key to create a Customer Master Key (CMK).
D. Amazon EBS encryption uses the AWS Key Management Service (AWS KMS) master key to create a Customer Master Key (CMK).

Correct Answer: D

Explanation:

Explanation: Amazon EBS encryption uses AWS Key Management Service (AWS KMS) master keys when creating encrypted volumes and any snapshots created from your encrypted volumes.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AmazonEBS.html