PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #374
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #374: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #374. The question stem and answer options stay visible for context.
Question
Your global defense company is migrating top-secret classified data to BigQuery and Cloud Storage. National security regulations demand that master encryption key material never leaves the accredited on-premises cryptographic hardware. You must retain the unilateral ability to revoke data access, independent of any cloud provider. What should you do?
Options
- AUse customer-managed encryption keys (CMEKs) for the BigQuery datasets and Cloud Storage
- BUse customer-supplied encryption keys (CSEKs) by providing your own encryption keys with each
- CImport existing on-premises master encryption keys into Cloud Key Management Service (Cloud
- DConfigure Cloud External Key Manager (Cloud EKM) for the BigQuery datasets and Cloud Storage
Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.