Question 315 of 318
Single answerYour organization must store highly sensitive data within Google Cloud. You need to design a solution that provides the strongest level of security and control. What should you do?
AUse Cloud Storage with customer-supplied encryption keys (CSEK), VPC Service Controls for network isolation, and Cloud DLP for data inspection.
BUse Cloud Storage with customer-managed encryption keys (CMEK), Cloud DLP for data classification, and Secret Manager for storing API access tokens.
✓CUse Cloud Storage with client-side encryption, Cloud KMS for key management, and Cloud HSM for cryptographic operations.
DUse Cloud Storage with server-side encryption, BigQuery with column-level encryption, and IAM roles for access control.
✓
Correct Answer: C
Use Cloud Storage with client-side encryption, Cloud KMS for key management, and Cloud HSM for cryptographic operations.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.