nerdexam
Google

CLOUD-DIGITAL-LEADER · Question #360

An organization is concerned about the unlikely event that Google Cloud infrastructure is physically accessed by someone with malicious intent. How is data protected in Google Cloud?

The correct answer is C. Data is stored using robust encryption. Google Cloud protects data at rest using robust encryption, ensuring that even if physical media were accessed, the data would be unreadable without the encryption keys.

Understanding Google Cloud Security

Question

An organization is concerned about the unlikely event that Google Cloud infrastructure is physically accessed by someone with malicious intent. How is data protected in Google Cloud?

Options

  • AData is immediately deleted whenever an intrusion is detected.
  • BData is stored on quantum computers with unbreakable encryption.
  • CData is stored using robust encryption.
  • DData is stored in random locations around the world to prevent it being found.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    90% (19)

Why each option

Google Cloud protects data at rest using robust encryption, ensuring that even if physical media were accessed, the data would be unreadable without the encryption keys.

AData is immediately deleted whenever an intrusion is detected.

Google Cloud does not delete customer data upon intrusion detection; doing so would cause permanent data loss and violate customer data ownership rights.

BData is stored on quantum computers with unbreakable encryption.

Google Cloud does not use quantum computers for data storage; this is a fictional claim with no basis in Google's infrastructure documentation.

CData is stored using robust encryption.Correct

Google Cloud encrypts all customer data at rest by default using AES-256 encryption at the storage layer, and data in transit is protected using TLS. Even if physical media were obtained by an unauthorized party, the encrypted data would be unreadable without the corresponding keys. Google manages encryption keys by default, and customers can additionally use Cloud KMS or Customer-Managed Encryption Keys (CMEK) for greater control.

DData is stored in random locations around the world to prevent it being found.

Data is stored in defined geographic regions and zones chosen by the customer, not in random worldwide locations; security is achieved through encryption, not obfuscation.

Concept tested: Google Cloud default encryption at rest

Source: https://cloud.google.com/docs/security/encryption/default-encryption

Topics

#Cloud Security#Data Protection#Encryption#Physical Security

Community Discussion

No community discussion yet for this question.

Full CLOUD-DIGITAL-LEADER Practice