Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 19

Question

You need to follow Google-recommended practices to leverage envelope encryption and encrypt data at the application layer. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Generate a data encryption key (DEK) locally to encrypt the data, and generate a new key encryption key (KEK) in Cloud KMS to encrypt the DEK. Store both the encrypted data and the encrypted DEK. Cloud KMS manages encryption keys and integrates with Google Cloud services for encryption.

Google Cloud Professional Cloud Security Engineer PCSE — Question 19