Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 231

Question

You are migrating an application into the cloud. The application will need to read data from a Cloud Storage bucket. Due to local regulatory requirements, you need to hold the key material used for encryption fully under your control and you require a valid rationale for accessing the key material. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Generate a key in your on-premises environment and store it in a Hardware Security Module (HSM) that is managed on-premises. Use this key as an external key in the Cloud Key Management Service (KMS). Activate Key Acce...

Google Cloud Professional Cloud Security Engineer PCSE — Question 231