In Huawei Cloud Stack, which of the following descriptions of the concepts in Key Management Service (KMS) is wrong?

In Huawei Cloud Stack, which of the following descriptions of the concepts in Key Management Service (KMS) is wrong?
A . Envelope encryption refers to sealing the data key of encrypted data into an envelope for storage, transmission and use. Data can be directly encrypted and decrypted without the user’s master key.
B . The user master key is mainly used to encrypt and protect the data encryption key. One user master key corresponds to encrypting one data encryption key.
C . The hardware security module is a hardware device that safely generates, stores, manages and uses keys and provides encryption processing services.
D . The default master key is automatically generated when the user uses EWS encryption through the corresponding cloud service for the first time. The default master key is independent between different tenants and between different services of the same tenant.

View Answer

Answer: B