CLOUD-DIGITAL-LEADER · Question #79
Customer Managed Encryption Keys (CMEK) can be used for encrypting data inside Cloud BigTable, which of the following statements is/are correct. (Select two answer)
The correct answer is B. Not supported for instances that have clustered in more than one region. C. CMEK can only be configured at the cluster level. For Cloud Bigtable CMEK: Option B is correct - CMEK for Bigtable is NOT supported for instances replicated across more than one region (multi-region replication). If you need cross-region replication, you cannot use CMEK. Option C is correct - CMEK is configured at the cluster…
Question
Customer Managed Encryption Keys (CMEK) can be used for encrypting data inside Cloud BigTable, which of the following statements is/are correct. (Select two answer)
Options
- AAdministrators can not rotate
- BNot supported for instances that have clustered in more than one region.
- CCMEK can only be configured at the cluster level.
- DYou can not use the same CMEK key in multiple projects
How the community answered
(19 responses)- A5% (1)
- B89% (17)
- D5% (1)
Explanation
For Cloud Bigtable CMEK: Option B is correct - CMEK for Bigtable is NOT supported for instances replicated across more than one region (multi-region replication). If you need cross-region replication, you cannot use CMEK. Option C is correct - CMEK is configured at the cluster level in Bigtable, not at the instance or table level. Option A is incorrect - administrators CAN rotate CMEK keys; key rotation is actually a supported and recommended security practice. Option D is incorrect - the same CMEK key CAN be used across multiple projects, as Cloud KMS keys are identified by resource name and can be referenced from different projects with appropriate IAM permissions.
Topics
Community Discussion
No community discussion yet for this question.