Unlock the power of your data in the cloud! Get hands-on with Google Cloud's core data services like BigQuery and Looker to validate your practical skills in data ingestion, analysis, and management, and earn your Associate Data Practitioner certification!
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An enterprise is planning to store sensitive analytics data in Google Cloud Storage and BigQuery. The security and compliance team establishes the following operational and governance requirements:
Which encryption key management strategy should the organization implement?
Customer-Managed Encryption Keys (CMEK) allow organizations to manage their own cryptographic keys inside Google Cloud using Cloud Key Management Service (Cloud KMS) or Cloud HSM. With CMEK, the customer creates and controls the root key (Key Encryption Key or KEK) used to protect the data encryption keys (DEKs) generated by Google Cloud services like BigQuery and Cloud Storage.
CMEK provides the ideal balance between security compliance and operational efficiency. Unlike GMEK, it provides full customer control over key lifecycles and revocation. Unlike CSEK, it eliminates the operational risk of key loss and the complexity of supplying raw cryptographic keys with every API request.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.
StudyCerts
StudyCerts