Google
PROFESSIONAL-DATA-ENGINEER · Question #149
You set up a streaming data insert into a Redis cluster via a Kafka cluster. Both clusters are running on Compute Engine instances. You need to encrypt data at rest with encryption keys that you can c
The correct answer is B. Create encryption keys in Cloud Key Management Service. Use those keys to encrypt your data in all of the Compute Engine cluster instances.. Explanation/Reference: https://cloud.google.com/compute/docs/disks/customer-managed-encryption
Submitted by priya_blr· Mar 30, 2026Ensuring solution quality
Question
You set up a streaming data insert into a Redis cluster via a Kafka cluster. Both clusters are running on Compute Engine instances. You need to encrypt data at rest with encryption keys that you can create, rotate, and destroy as needed. What should you do?
Options
- ACreate a dedicated service account, and use encryption at rest to reference your data stored in your Compute Engine cluster instances as part of your API
- BCreate encryption keys in Cloud Key Management Service. Use those keys to encrypt your data in all of the Compute Engine cluster instances.
- CCreate encryption keys locally. Upload your encryption keys to Cloud Key Management Service. Use those keys to encrypt your data in all of the Compute
- DCreate encryption keys in Cloud Key Management Service. Reference those keys in your API service calls when accessing the data in your Compute Engine
How the community answered
(24 responses)- A17% (4)
- B75% (18)
- C4% (1)
- D4% (1)
Explanation
Explanation/Reference: https://cloud.google.com/compute/docs/disks/customer-managed-encryption
Topics
#Cloud KMS#customer-managed encryption keys#encryption at rest#Compute Engine
Community Discussion
No community discussion yet for this question.