Google Cloud Professional Cloud Architect PCA — Topic 1 Question 248

Question

You are deploying a highly confidential data processing workload on Google Cloud. Your company’s compliance framework mandates that cryptographic keys used for encrypting data at rest must be generated and stored exclusively within a validated Hardware Security Module (HSM). You want to use a fully integrated Google Cloud managed service to handle the lifecycle and usage of these keys. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a new key in Cloud Key Management Service (Cloud KMS) with the HSM protection level. Cloud KMS manages encryption keys and integrates with Google Cloud services for encryption.

Google Cloud Professional Cloud Architect PCA — Question 248