PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #374
Your global defense company is migrating top-secret classified data to BigQuery and Cloud Storage. National security regulations demand that master encryption key material never leaves the…
The correct answer is D. Configure Cloud External Key Manager (Cloud EKM) for the BigQuery datasets and Cloud Storage. Cloud External Key Manager (Cloud EKM) allows encryption keys to remain in your on-premises HSMs, ensuring that key material never leaves your controlled environment. By integrating EKM with BigQuery and Cloud Storage, your organization retains exclusive control over key access…
Question
Options
- AUse customer-managed encryption keys (CMEKs) for the BigQuery datasets and Cloud Storage
- BUse customer-supplied encryption keys (CSEKs) by providing your own encryption keys with each
- CImport existing on-premises master encryption keys into Cloud Key Management Service (Cloud
- DConfigure Cloud External Key Manager (Cloud EKM) for the BigQuery datasets and Cloud Storage
How the community answered
(44 responses)- A5% (2)
- B7% (3)
- C20% (9)
- D68% (30)
Explanation
Cloud External Key Manager (Cloud EKM) allows encryption keys to remain in your on-premises HSMs, ensuring that key material never leaves your controlled environment. By integrating EKM with BigQuery and Cloud Storage, your organization retains exclusive control over key access and revocation, satisfying national security and compliance requirements for handling top-secret classified data.
Topics
Community Discussion
No community discussion yet for this question.