Question 252 of 318
Single answerYour organization's financial modeling application is already deployed on Google Cloud. The application processes large amounts of sensitive customer financial data. Application code is old and poorly understood by your current software engineers. Recent threat modeling exercises have highlighted the potential risk of sophisticated side-channel attacks against the application while the application is running. You need to further harden the Google Cloud solution to mitigate the risk of these side-channel attacks, ensuring maximum protection for the confidentiality of financial data during processing, while minimizing application problems. What should you do?
AEnforce stricter access controls for Compute Engine instances by using service accounts, least privilege IAM policies, and limit network access.
BImplement a runtime library designed to introduce noise and timing variations into the application's execution which will disrupt side-channel attack.
✓CMigrate the application to Confidential VMs to provide hardware-level encryption of memory and protect sensitive data during processing.
DUtilize customer-managed encryption keys (CMEK) to ensure complete control over the encryption process.
✓
Correct Answer: C
Migrate the application to Confidential VMs to provide hardware-level encryption of memory and protect sensitive data during processing.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.