Question 311 of 318
Single answerYour organization operates in a highly regulated environment and has a stringent set of compliance requirements for protecting customer data. You must encrypt data while in use to meet regulations. What should you do?
AEnable the use of customer-supplied encryption keys (CSEK) keys in the Google Compute Engine VMs to give your organization maximum control over their VM disk encryption.
✓BEstablish a trusted execution environment with a Confidential VM.
CUse a Shielded VM to ensure a secure boot with integrity monitoring for the application environment.
DUse customer-managed encryption keys (CMEK) and Cloud KSM to enable your organization to control their keys for data encryption in Cloud SQL.
✓
Correct Answer: B
Establish a trusted execution environment with a Confidential VM.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.