You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?

The correct answer is A. Supply the encryption key in a .boto configuration file. Use gsutil to upload the files. https://cloud.google.com/storage/docs/gsutil/addlhelp/UsingEncryptionKeys#generating- customer-supplied-encryption-keys

Submitted by rachelw· Mar 30, 2026Designing for security and compliance

Question

You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?

Options

ASupply the encryption key in a .boto configuration file. Use gsutil to upload the files.
BSupply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.
CUse gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
DUse gsutil to create a bucket, and use the flag --encryption-key to supply the encryption key. Use

How the community answered

(48 responses)

A
88% (42)
B
4% (2)
C
6% (3)
D
2% (1)

Explanation

https://cloud.google.com/storage/docs/gsutil/addlhelp/UsingEncryptionKeys#generating- customer-supplied-encryption-keys

Topics

#customer-supplied encryption keys#Cloud Storage#gsutil#.boto configuration

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice