Professional Cloud Security EngineerDemo

Question

Your security team uses encryption keys to maintain the confidentiality of user data. You want to define a process that reduces the effects of a potentially compromised symmetric encryption key in Cloud Key Management Service (Cloud KMS).

Which actions should your team take before an incident happens?

Choose two

A Disable and revoke access to compromised keys.
B Enable automatic key version rotation on a regular schedule.
C Manually rotate key versions on an ad hoc schedule.
D Limit the number of messages encrypted with each key version.
E Disable the Cloud KMS API.

Explanation

For symmetric encryption, automatically rotating key versions on a regular schedule is a recommended security practice that reduces the potential consequences of key compromise. Restricting the number of messages encrypted by a given key version also limits cryptanalytic exposure and the impact if that version is compromised.

Learn more

Professional Cloud Security EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ196

Community Discussion