Question 231 of 318
Single answerYou are setting up a new Cloud Storage bucket in your environment that is encrypted with a customer managed encryption key (CMEK). The CMEK is stored in Cloud Key Management Service (KMS), in project “prj-aâ€, and the Cloud Storage bucket will use project “prj-bâ€. The key is backed by a Cloud Hardware Security Module (HSM) and resides in the region europe-west3. Your storage bucket will be located in the region europe-west1. When you create the bucket, you cannot access the key, and you need to troubleshoot why.
What has caused the access issue?
What has caused the access issue?
AA firewall rule prevents the key from being accessible.
BCloud HSM does not support Cloud Storage.
CThe CMEK is in a different project than the Cloud Storage bucket.
✓DThe CMEK is in a different region than the Cloud Storage bucket.
✓
Correct Answer: D
The CMEK is in a different region than the Cloud Storage bucket.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.