1 / 5
What does 'key rotation' mean?
-
-
-
-
Key rotation regularly swaps in a fresh key and retires the old to limit exposure if a key is compromised.
2 / 5
During rotation a 'grace period' is kept. Why?
-
-
-
-
A grace period lets the old key remain valid for decryption until everything is re-encrypted or expires.
3 / 5
A system supports multiple 'key versions'. What does this allow?
-
-
-
-
Versioning tags ciphertext with the key version used, so the matching key decrypts it during rotation.
4 / 5
What is 're-encryption' (rewrapping) in this context?
-
-
-
-
Re-encryption migrates existing data to the new key so the old key can finally be retired.
5 / 5
Which sentence correctly uses 'compromised key'?
-
-
-
-
A compromised key may be known to attackers; emergency rotation and revocation limit the damage.