Google Cloud Professional Data Engineer PDE — Topic 1 Question 262

Question

You are on the data governance team and are implementing security requirements. You need to encrypt all your data in BigQuery by using an encryption key managed by your team. You must implement a mechanism to generate and store encryption material only on your on-premises hardware security module (HSM). You want to rely on Google managed solutions. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create the encryption key in the on-premises HSM and link it to a Cloud External Key Manager (Cloud EKM) key. Associate the created Cloud KMS key while creating the BigQuery resources. BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. Cloud KMS manages encryption keys and integrates with Google Cloud services for encryption. Cloud External Key Manager lets you hold encryption keys outside Google Cloud.

Google Cloud Professional Data Engineer PDE — Question 262