Question 33 of 318
Single answerA customer wants to move their sensitive workloads to a Compute Engine-based cluster using Managed Instance Groups (MIGs). The jobs are bursty and must be completed quickly. They have a requirement to be able to control the key lifecycle.
Which boot disk encryption solution should you use on the cluster to meet this customer's requirements?
Which boot disk encryption solution should you use on the cluster to meet this customer's requirements?
ACustomer-supplied encryption keys (CSEK)
✓BCustomer-managed encryption keys (CMEK) using Cloud Key Management Service (KMS)
CEncryption by default
DPre-encrypting files before transferring to Google Cloud Platform (GCP) for analysis
✓
Correct Answer: B
Customer-managed encryption keys (CMEK) using Cloud Key Management Service (KMS)
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.