Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ249

Ensuring data protection

A large financial institution is migrating its Big Data analytics to Google Cloud Platform. It wants maximum control over the encryption process for data stored at rest in BigQuery.

Which technique should the institution use?

  • A Use Cloud Storage as a federated Data Source.
  • B Use a Cloud Hardware Security Module (Cloud HSM).
  • C Customer-managed encryption keys (CMEK).
  • D Customer-supplied encryption keys (CSEK).
Explanation

Customer-managed encryption keys (CMEK) let an organization control the Cloud KMS key that BigQuery uses to protect data at rest, including key access, rotation, and the ability to disable or destroy the key. BigQuery supports CMEK for this purpose.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!