Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Google Professional Cloud Security Engineer Exam - Topic 3 Question 118 Discussion

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?
D) Secret Manager
A) Cloud Key Management Service
B) Compute Engine guest attributes
C) Compute Engine custom metadata

Google Professional Cloud Security Engineer Exam - Topic 3 Question 118 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 118
Topic #: 3
[All Professional Cloud Security Engineer Questions]

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?

Show Suggested Answer Hide Answer
Suggested Answer: D

Objective: Store and retrieve sensitive configuration data for an application running on Compute Engine.

Solution: Use Secret Manager to securely store and manage access to sensitive configuration data.

Steps:

Step 1: Open the Google Cloud Console.

Step 2: Navigate to the Secret Manager section.

Step 3: Create a new secret and add the sensitive configuration data.

Step 4: Set appropriate IAM policies to control access to the secret.

Step 5: Update the application to retrieve the secret from Secret Manager using the appropriate client libraries or APIs.

Secret Manager provides a secure and centralized way to manage sensitive information, with fine-grained access control and audit logging capabilities.


Secret Manager Documentation

Storing and Accessing Secrets

Contribute your Thoughts:

0/2000 characters
Rhea
2 days ago
I practiced a similar question where we had to choose between different storage options, and I think Cloud Key Management Service was mentioned as more for encryption keys rather than configuration data.
upvoted 0 times
...
Alva
7 days ago
I feel like we discussed Compute Engine guest attributes in class, but I can't recall if they're secure enough for sensitive data.
upvoted 0 times
...
Twila
12 days ago
I think I remember that Secret Manager is specifically designed for storing sensitive data, but I'm not entirely sure if it's the best option here.
upvoted 0 times
...

Save Cancel