Question 64 of 318
Single answerIn an effort for your company messaging app to comply with FIPS 140-2, a decision was made to use GCP compute and network services. The messaging app architecture includes a Managed Instance Group (MIG) that controls a cluster of Compute Engine instances. The instances use Local SSDs for data caching and
UDP for instance-to-instance communications. The app development team is willing to make any changes necessary to comply with the standard
Which options should you recommend to meet the requirements?
Which options should you recommend to meet the requirements?
✓AEncrypt all cache storage and VM-to-VM communication using the BoringCrypto module.
BSet Disk Encryption on the Instance Template used by the MIG to customer-managed key and use BoringSSL for all data transit between instances.
CChange the app instance-to-instance communications from UDP to TCP and enable BoringSSL on clients' TLS connections.
DSet Disk Encryption on the Instance Template used by the MIG to Google-managed Key and use BoringSSL library on all instance-to-instance communications.
✓
Correct Answer: A
Encrypt all cache storage and VM-to-VM communication using the BoringCrypto module.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.