Key management primarily concerns which concept?

• A. Regularly replacing cryptographic keys
• B. Data at rest encryption
• C. Hiding data within another medium
• D. The lifecycle of cryptographic keys

Answer: (D)

Key management is about how cryptographic keys are handled throughout their entire life. This includes how keys are created, stored securely, distributed to the right parties, used for encryption and decryption, rotated or updated when needed, revoked if they’re compromised, and eventually destroyed or archived. Managing the lifecycle ensures keys remain protected, access is controlled and auditable, and backups or recoveries are in place. While regularly replacing keys is a part of this process, the broader concept covers all stages from creation to retirement. Data at rest encryption relies on keys, but key management focuses on the keys themselves, not the data or other unrelated techniques like hiding information in another medium.