Question 132 of 318
Single answerYou need to implement an encryption-at-rest strategy that protects sensitive data and reduces key management complexity for non-sensitive data. Your solution has the following requirements:
✑ Schedule key rotation for sensitive data.
✑ Control which region the encryption keys for sensitive data are stored in.
✑ Minimize the latency to access encryption keys for both sensitive and non-sensitive data.
What should you do?
✑ Schedule key rotation for sensitive data.
✑ Control which region the encryption keys for sensitive data are stored in.
✑ Minimize the latency to access encryption keys for both sensitive and non-sensitive data.
What should you do?
AEncrypt non-sensitive data and sensitive data with Cloud External Key Manager.
BEncrypt non-sensitive data and sensitive data with Cloud Key Management Service.
CEncrypt non-sensitive data with Google default encryption, and encrypt sensitive data with Cloud External Key Manager.
✓DEncrypt non-sensitive data with Google default encryption, and encrypt sensitive data with Cloud Key Management Service.
✓
Correct Answer: D
Encrypt non-sensitive data with Google default encryption, and encrypt sensitive data with Cloud Key Management Service.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.