DEA-C01 Data Security and Governance Practice Question
Network Topology
Refer to the exhibit. A data engineer runs the commands shown. What can be determined about the key with ID 1234abcd-12ab-34cd-56ef-1234567890ab?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It is an AWS managed key.
The command output shows that the key's KeyManager is 'AWS', indicating it is an AWS managed key, which corresponds to option D. Option A is incorrect because the key state is 'Enabled', not 'PendingDeletion'. Option B is incorrect because the ARN does not specify a region; the key was created in us-east-1 by default. Option C is incorrect because AWS managed keys have KeyManager set to 'AWS', not 'CUSTOMER'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It is pending deletion.
Why it's wrong here
KeyState is Enabled.
- ✗
It was created in us-west-2.
Why it's wrong here
The ARN includes the region us-east-1, indicating the key was created in us-east-1, not us-west-2.
- ✗
It is a customer managed key.
Why it's wrong here
KeyManager would be CUSTOMER.
- ✓
It is an AWS managed key.
Why this is correct
KeyManager: AWS means it's AWS managed.
Go deeper
Related to this question
About these practice questions
This DEA-C01 question is part of Courseiva's 1,711-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.