Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ356

Ensuring data protection

Your company uses Cloud Dataproc for Spark and Hadoop jobs. You want to create, rotate, and destroy symmetric encryption keys for the persistent disks used by Cloud Dataproc. The keys can be stored in the cloud.

What should you do?

  • A Use the Cloud Key Management Service to manage the data encryption key (DEK).
  • B Use the Cloud Key Management Service to manage the key encryption key (KEK).
  • C Use customer-supplied encryption keys to manage the data encryption key (DEK).
  • D Use customer-supplied encryption keys to manage the key encryption key (KEK).
Explanation

Cloud Dataproc customer-managed encryption keys use Cloud Key Management Service to manage the key encryption key (KEK). The service retains management of the data encryption keys (DEKs) that encrypt the persistent-disk data, while Cloud KMS lets the customer manage the KEK lifecycle, including rotation and destruction.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!