Cloud Kms Envelope Encryption Large Payloads

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A data engineering team is designing an automated ingestion pipeline that processes sensitive transaction files exceeding 50 MB before storing them in Google Cloud. The organization's security policy requires column- and application-layer encryption managed centrally through Cloud Key Management Service (Cloud KMS).

During architectural review, the team observes that the Cloud KMS Encrypt API rejects direct encryption requests exceeding 64 KiB.

Which cryptographic key management strategy should the team implement to encrypt these large payloads securely and efficiently?

Implement envelope encryption using a cryptographic library like Tink by generating a local Data Encryption Key (DEK) to encrypt the payload, wrapping the DEK with a Key Encryption Key (KEK) in Cloud KMS, and storing the ciphertext with the wrapped DEK.

Create an asymmetric RSA-4096 Cloud KMS key pair, export the private key material directly into the data processing application runtime, and encrypt payloads locally using the exported private key.

Submit a quota increase request in the Google Cloud console to raise the Cloud KMS API max plaintext payload limit from 64 KiB to 100 MB per request.

Split each 50 MB payload into 64 KiB blocks, invoke the Cloud KMS Encrypt API synchronously for each block using a single symmetric CryptoKey, and concatenate the resulting ciphertexts.

Professional Cloud Data Engineer

Cloud Kms Envelope Encryption Large Payloads

An e-commerce company uses Looker to analyze transaction data. A data analyst needs to update the orders.view file to add a new field that calculates the total monetary revenue by summing the values of an existing sale_price dimension. Which LookML code block correctly defines this aggregate field?

Professional Cloud Data Engineer

Cloud Kms Envelope Encryption Large Payloads

Related questions

An e-commerce company uses Looker to analyze transaction data. A data analyst needs to update the orders.view file to add a new field that calculates the total monetary revenue by summing the values of an existing sale_price dimension. Which LookML code block correctly defines this aggregate field?