Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Security Engineer Exam - Topic 3 Question 9 Discussion

What are the steps to encrypt data using envelope encryption?
C) Generate a data encryption key (DEK) locally. Encrypt data with the DEK. Use a key encryption key (KEK) to wrap the DEK. Store the encrypted data and the wrapped DEK.
A) Generate a data encryption key (DEK) locally. Use a key encryption key (KEK) to wrap the DEK. Encrypt data with the KEK. Store the encrypted data and the wrapped KEK.
B) Generate a key encryption key (KEK) locally. Use the KEK to generate a data encryption key (DEK). Encrypt data with the DEK. Store the encrypted data and the wrapped DEK.
D) Generate a key encryption key (KEK) locally. Generate a data encryption key (DEK) locally. Encrypt data with the KEK. Store the encrypted data and the wrapped DEK.

Google Professional Cloud Security Engineer Exam - Topic 3 Question 9 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 9
Topic #: 3
[All Professional Cloud Security Engineer Questions]

What are the steps to encrypt data using envelope encryption?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://cloud.google.com/kms/docs/envelope-encryption

by Jerry at May 07, 2022, 04:17 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lashaunda
9 months ago
I thought you always generate the KEK first, isn't that how it works?
upvoted 0 times
...
Tina
9 months ago
Definitely not B, you need the DEK first!
upvoted 0 times
...
Nathalie
9 months ago
Wait, can you really encrypt data with the KEK? That seems off.
upvoted 0 times
...
Edward
9 months ago
I think A is the correct answer!
upvoted 0 times
...
Leota
9 months ago
You start with a DEK, then wrap it with a KEK.
upvoted 0 times
...
Kizzy
10 months ago
I feel like option C is close, but I can't recall if we should encrypt the data with the DEK before or after wrapping it with the KEK.
upvoted 0 times
...
Reed
10 months ago
I remember practicing a question like this, and I think we definitely need to use the KEK to wrap the DEK after generating it.
upvoted 0 times
...
James
10 months ago
I think the first step is to generate the DEK locally, but I'm not sure if we wrap it with the KEK before or after encrypting the data.
upvoted 0 times
...
Carolann
10 months ago
I’m leaning towards option A, but I’m a bit confused about whether we store the KEK or the DEK after wrapping.
upvoted 0 times
...
Joni
10 months ago
This seems straightforward. Based on the topology, I think option C is the correct answer. R2 setting the MED to 150 in the export direction towards R1 would make R2's route less preferred compared to R3's default route, which is what the question is asking for.
upvoted 0 times
...
Tori
10 months ago
Option A is the best - leaving briefly can help the suspect reset emotionally and might make them more likely to continue talking when you return.
upvoted 0 times
...
Kimberely
10 months ago
This looks like a tricky one. I'll need to think carefully about the different options and what they could mean in the context of a build process.
upvoted 0 times
...

Save Cancel