
Ultimate access to all questions.
Your organization's financial modeling application, which processes large volumes of sensitive customer financial data, is deployed on Google Cloud. The application's legacy code is not well understood by the current engineering team. Recent threat modeling has identified a significant risk of sophisticated side-channel attacks during application runtime. You need to harden the Google Cloud deployment to mitigate this risk and provide maximum protection for the confidentiality of financial data during processing, while minimizing application disruption. What should you do?
A
Enforce stricter access controls for Compute Engine instances by using service accounts, least privilege IAM policies, and limit network access.
B
Implement a runtime library designed to introduce noise and timing variations into the application's execution which will disrupt side-channel attack.
C
Migrate the application to Confidential VMs to provide hardware-level encryption of memory and protect sensitive data during processing.
D
Utilize customer-managed encryption keys (CMEK) to ensure complete control over the encryption process.