Google Professional Cloud Security Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
To achieve FIPS 140-2 compliance for a messaging app on GCP that uses a Managed Instance Group, Local SSDs for caching, and UDP for instance-to-instance communication, what specific changes should be recommended?
A
Encrypt all cache storage and VM-to-VM communication using the BoringCrypto module.
B
Set Disk Encryption on the Instance Template used by the MIG to customer-managed key and use BoringSSL for all data transit between instances.
C
Change the app instance-to-instance communications from UDP to TCP and enable BoringSSL on clients' TLS connections.
D
Set Disk Encryption on the Instance Template used by the MIG to Google-managed Key and use BoringSSL library on all instance-to-instance communications.