Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ115

Ensuring data protection

You are migrating an on-premises data warehouse to BigQuery, Cloud SQL, and Cloud Storage. You need to configure security services for the data warehouse. Your company compliance policies require that the data warehouse must:

  • Protect data at rest with full lifecycle management for cryptographic keys.
  • Use a key-management provider separate from data management.
  • Provide visibility into every encryption-key request.

Which services should be included in the data warehouse implementation?

Choose two
  • A Customer-managed encryption keys
  • B Customer-Supplied Encryption Keys
  • C Key Access Justifications
  • D Access Transparency and Approval
  • E Cloud External Key Manager
Explanation

Cloud External Key Manager lets supported Google Cloud services protect data at rest using key material that remains in an external key-management provider, separating key management from data management and retaining external control of the keys. Key Access Justifications provides the reason information associated with key-access requests and can be enforced by supported external key managers, giving the required visibility into those requests.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!