Multiple ChoiceBeginner 45s
Envelope encryption for secrets at rest
Why does secrets management use envelope encryption with a KMS?
Options
- 1Data keys encrypt secrets while the KMS-held master key protects data keys, limiting blast radius and enabling rotation
- 2It avoids the need to store any keys at all because the stored secrets are never actually encrypted
- 3It makes stored secrets directly readable by any service without performing any decryption step at all
- 4It removes the need to keep audit logs recording who accessed or decrypted each individual secret
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.