CLOUD-DIGITAL-LEADER · Question #360
An organization is concerned about the unlikely event that Google Cloud infrastructure is physically accessed by someone with malicious intent. How is data protected in Google Cloud?
The correct answer is C. Data is stored using robust encryption. Google Cloud protects data at rest using robust encryption, ensuring that even if physical media were accessed, the data would be unreadable without the encryption keys.
Question
An organization is concerned about the unlikely event that Google Cloud infrastructure is physically accessed by someone with malicious intent. How is data protected in Google Cloud?
Options
- AData is immediately deleted whenever an intrusion is detected.
- BData is stored on quantum computers with unbreakable encryption.
- CData is stored using robust encryption.
- DData is stored in random locations around the world to prevent it being found.
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C90% (19)
Why each option
Google Cloud protects data at rest using robust encryption, ensuring that even if physical media were accessed, the data would be unreadable without the encryption keys.
Google Cloud does not delete customer data upon intrusion detection; doing so would cause permanent data loss and violate customer data ownership rights.
Google Cloud does not use quantum computers for data storage; this is a fictional claim with no basis in Google's infrastructure documentation.
Google Cloud encrypts all customer data at rest by default using AES-256 encryption at the storage layer, and data in transit is protected using TLS. Even if physical media were obtained by an unauthorized party, the encrypted data would be unreadable without the corresponding keys. Google manages encryption keys by default, and customers can additionally use Cloud KMS or Customer-Managed Encryption Keys (CMEK) for greater control.
Data is stored in defined geographic regions and zones chosen by the customer, not in random worldwide locations; security is achieved through encryption, not obfuscation.
Concept tested: Google Cloud default encryption at rest
Source: https://cloud.google.com/docs/security/encryption/default-encryption
Topics
Community Discussion
No community discussion yet for this question.