Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Google Professional Cloud Security Engineer Exam - Topic 3 Question 118 Discussion

Posted by Peggie on May 31, 2026 at 09:53 PM

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?

Suggested Answer: D

Objective: Store and retrieve sensitive configuration data for an application running on Compute Engine.

Solution: Use Secret Manager to securely store and manage access to sensitive configuration data.

Steps:

Step 1: Open the Google Cloud Console.

Step 2: Navigate to the Secret Manager section.

Step 3: Create a new secret and add the sensitive configuration data.

Step 4: Set appropriate IAM policies to control access to the secret.

Step 5: Update the application to retrieve the secret from Secret Manager using the appropriate client libraries or APIs.

Secret Manager provides a secure and centralized way to manage sensitive information, with fine-grained access control and audit logging capabilities.


Secret Manager Documentation

Storing and Accessing Secrets

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
19 comments · newest first
SA
Santos 13 days ago
Same here. Better protection overall.
MA
Margurite 18 days ago
I’d stick with D) for sensitive config data.
KE
Kenneth 23 days ago
Plus, it has access controls. Very important!
TE
Teddy 28 days ago
Right! Secret Manager encrypts data at rest.
ES
Estrella 1 month ago
C) Custom metadata isn’t encrypted. Not safe enough.
SH
Sherell 1 month ago
B) Compute Engine guest attributes is too exposed.
SA
Santos 1 month ago
I feel D) is more secure for secrets.
MA
Margurite 2 months ago
A) Cloud Key Management Service is also good, but not as focused.
KE
Kenneth 2 months ago
Agreed! It’s designed for sensitive data.
TE
Teddy 2 months ago
I think D) Secret Manager is the best choice.
AN
Anisha 2 months ago
I didn't know Secret Manager was that secure, sounds interesting!
AR
Aretha 2 months ago
B and C are not secure enough for sensitive info.
LA
Latonia 2 months ago
Wait, isn't A) Cloud Key Management Service also a good option?
HE
Herschel 3 months ago
Totally agree, Secret Manager is the best choice!
DE
Devon 3 months ago
I'd go with D) Secret Manager for sensitive data.
JA
Jacinta 3 months ago
I’m leaning towards Secret Manager, but I wonder if Compute Engine custom metadata could also be a viable option for some use cases.
RH
Rhea 3 months ago
I practiced a similar question where we had to choose between different storage options, and I think Cloud Key Management Service was mentioned as more for encryption keys rather than configuration data.
AL
Alva 3 months ago
I feel like we discussed Compute Engine guest attributes in class, but I can't recall if they're secure enough for sensitive data.
TW
Twila 4 months ago
I think I remember that Secret Manager is specifically designed for storing sensitive data, but I'm not entirely sure if it's the best option here.
0/2000 characters

Save Cancel