Google Exam Professional-Data-Engineer Topic 1 Question 7 Discussion

Actual exam question for Google's Google Cloud Certified Professional Data Engineer exam

Question #: 7
Topic #: 1

[All Google Cloud Certified Professional Data Engineer Questions]

You want to archive data in Cloud Storage. Because some data is very sensitive, you want to use the ''Trust No One'' (TNO) approach to encrypt your data to prevent the cloud provider staff from decrypting your data. What should you do?

AUse gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key and unique additional authenticated data (AAD). Use gsutil cp to upload each encrypted file to the Cloud Storage bucket, and keep the AAD outside of Google Cloud.

BUse gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key. Use gsutil cp to upload each encrypted file to the Cloud Storage bucket. Manually destroy the key previously used for encryption, and rotate the key once and rotate the key once.

CSpecify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in Cloud Memorystore as permanent storage of the secret.

DSpecify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in a different project that only the security team can access.

Show Suggested Answer

Suggested Answer: B

by Zona at May 06, 2022, 07:57 PM

Limited Time Offer

25%

Off

Get Premium Professional-Data-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!