Google Professional Cloud Security Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You need to implement an encryption at-rest strategy that reduces key management overhead for non-sensitive data while protecting sensitive data, offers control over key residency and rotation schedules, and meets FIPS 140-2 Level 1 compliance for all data. What should you do?
A
Encrypt non-sensitive data and sensitive data with Cloud External Key Manager.
B
Encrypt non-sensitive data and sensitive data with Cloud Key Management Service
C
Encrypt non-sensitive data with Google default encryption, and encrypt sensitive data with Cloud External Key Manager.
D
Encrypt non-sensitive data with Google default encryption, and encrypt sensitive data with Cloud Key Management Service.