Question 560
An encryption team rotates a column master key but app clients still use outdated metadata. Which test result BEST demonstrates that the intended solution is working?
Explanation
Correct Answer
Authorized clients read/write after rotation and revoked keys no longer work. This is the decisive observable evidence after implementing perform supported key rotation and client configuration changes as a coordinated migration. It tests the underlying requirement: Column key hierarchy and client metadata must agree for encrypted column access.
Incorrect Answers
Supported equality or enclave test cases behave as designed without broad plaintext exposure. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.
A test role change creates an alertable audit record. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.
A simulated service administrator cannot erase the retained central record. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.