PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #255
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #255: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #255. The question stem and answer options stay visible for context.
Question
You are setting up a new Cloud Storage bucket in your environment that is encrypted with a customer managed encryption key (CMEK). The CMEK is stored in Cloud Key Management Service (KMS), in project "prj-a", and the Cloud Storage bucket will use project "prj-b". The key is backed by a Cloud Hardware Security Module (HSM) and resides in the region europe-west3. Your storage bucket will be located in the region europe-west1. When you create the bucket, you cannot access the key, and you need to troubleshoot why. What has caused the access issue?
Options
- AA firewall rule prevents the key from being accessible.
- BCloud HSM does not support Cloud Storage.
- CThe CMEK is in a different project than the Cloud Storage bucket.
- DThe CMEK is in a different region than the Cloud Storage bucket.
Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.