A Company Has a Compliance Requirement to Rotate Its Encryption

Multiple Choice

A company has a compliance requirement to rotate its encryption keys on an annual basis. A Security Engineer needs a process to rotate the KMS Customer Master Keys (CMKs) that were created using imported key material. How can the Engineer perform the key rotation process MOST efficiently?

A) Create a new CMK, and redirect the existing Key Alias to the new CMK.
B) Select the option to auto-rotate the key.
C) Upload new key material into the existing CMK.
D) Create a new CMK, and change the application to point to the new CMK.