Cloud Key Management Service MCQ Questions and Answers

Mastering Cloud Key Management Service is crucial for cloud certification success. This dedicated practice set features 117 Cloud Key Management Service MCQ questions and answers designed to mirror real exam scenarios across various GCP certifications.

📝 117 Questions⏱️ 90 min🎯 Pass: 70%

About Cloud Key Management Service Practice Questions

This detailed quiz focuses on Cloud Key Management Service, covering key concepts and scenarios often found in GCP exams.

  • Comprehensive coverage of Cloud Key Management Service features.
  • Scenario-based questions testing design and troubleshooting skills.
  • Detailed explanations to reinforce learning.

All 117 Cloud Key Management Service Questions

Browse through the complete list of questions and answers below. Use this resource to review specific concepts or check your understanding of Cloud Key Management Service.

1

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Cloud IAM
Google Cloud Armor
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
2

What is Google Cloud Secret Manager used for?

To securely store and manage sensitive information like API keys, passwords, and certificates
To store top-secret government documents
To hide the names of your GCP projects
To manage the payroll of your employees
View Explanation
✓ Correct Answer: To securely store and manage sensitive information like API keys, passwords, and certificatesExplanation:Secret Manager is the central place to store secrets, decoupling them from your code.
3

In Secret Manager, what is the difference between a 'Secret' and a 'Secret Version'?

A secret is the container; a version is the actual value (e.g., 'passwordV1')
A secret is public; a version is private
There is no difference
Secrets are for AWS; Versions are for GCP
View Explanation
✓ Correct Answer: A secret is the container; a version is the actual value (e.g., 'passwordV1')Explanation:You rotate the value of a secret by adding a new version.
4

Which GCP service is used to control who has access to specific secrets in Secret Manager?

Cloud IAM
Identity-Aware Proxy (IAP)
Cloud KMS
Cloud Identity
View Explanation
✓ Correct Answer: Cloud IAMExplanation:IAM roles and permissions are used to grant access to secrets at the project or individual secret level.
5

Does Secret Manager support automatic rotation of secrets?

Yes, by integrating with Cloud Functions to update the secret value on a schedule
No, you must do it manually every time
Yes, but only for Google-managed passwords
Only for non-production environments
View Explanation
✓ Correct Answer: Yes, by integrating with Cloud Functions to update the secret value on a scheduleExplanation:You can configure a rotation schedule and a Cloud Function to handle the actual password update logic.
6

How much does it cost to use Secret Manager?

Billing is based on the number of active secret versions and the number of API access requests
It is completely free
Fixed $10 per project per month
Per line of the secret's value
View Explanation
✓ Correct Answer: Billing is based on the number of active secret versions and the number of API access requestsExplanation:Secret Manager is cost-effective and billed based on usage.
7

Are secrets in Secret Manager encrypted at rest?

Yes, they are always encrypted with a Google-managed key or a customer-managed encryption key (CMEK)
No, they are plain text
Only if you pay for the 'Secure' tier
Only in certain regions
View Explanation
✓ Correct Answer: Yes, they are always encrypted with a Google-managed key or a customer-managed encryption key (CMEK)Explanation:GCP provides strong encryption by default for all stored data.
8

Which Cloud service can you use to audit every time someone accesses a secret in Secret Manager?

Cloud Audit Logs
Cloud Tracking
BigQuery
Cloud Secret Auditor
View Explanation
✓ Correct Answer: Cloud Audit LogsExplanation:Secret Manager integrated with Cloud Audit Logs to provide a history of access.
9

What is the primary benefit of using Secret Manager over environment variables for sensitive data?

It is more secure, supports versioning, and allows for easier rotation and auditing
Environment variables are faster
Environment variables don't work in the cloud
There is no benefit
View Explanation
✓ Correct Answer: It is more secure, supports versioning, and allows for easier rotation and auditingExplanation:Environment variables are often exposed in logs or console interfaces, while Secret Manager is designed for high security.
10

Can you replicate secrets across different Google Cloud regions?

Yes, you can choose local or global replication for higher availability
No, a secret is locked to the region where it was created
Only if you use a secondary project
Only in the North America regions
View Explanation
✓ Correct Answer: Yes, you can choose local or global replication for higher availabilityExplanation:Secret Manager allows you to manage the location and redundancy of your secrets.
11

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
12

Which Google Cloud service allows you to manage cryptographic keys (AES-256, RSA, etc.) at scale and use them to protect your data-at-rest?

Cloud Key Management Service (KMS)
Cloud IAM
Cloud HSM
Secret Manager
View Explanation
✓ Correct Answer: Cloud Key Management Service (KMS)Explanation:Cloud KMS provides a centralized way to create, rotate, and disable keys.
13

What is the difference between a 'Key Ring' and a 'CryptoKey' in Cloud KMS?

A Key Ring is a logical grouping of CryptoKeys created in a specific location (region)
A Key Ring is for physical keys only
CryptoKeys are free; Key Rings cost money
There is no functional difference
View Explanation
✓ Correct Answer: A Key Ring is a logical grouping of CryptoKeys created in a specific location (region)Explanation:Key Rings act as a container for organization and permit-management for their child keys.
14

What is 'Automatic Key Rotation' in Cloud KMS?

A feature that automatically generates a new key version at a defined frequency (e.g., every 90 days)
A tool that moves keys between regions
A way to delete old keys automatically
A security scan of the keys
View Explanation
✓ Correct Answer: A feature that automatically generates a new key version at a defined frequency (e.g., every 90 days)Explanation:Rotation reduces the impact if a single key version is compromised.
15

Which Cloud KMS feature provides Hardware Security Module (HSM) protection (FIPS 140-2 Level 3) for your keys without requiring you to manage physical hardware?

Cloud HSM (integrated with Cloud KMS)
Encrypted Persistent Disks
Secret Manager
Cloud DLP
View Explanation
✓ Correct Answer: Cloud HSM (integrated with Cloud KMS)Explanation:Cloud HSM allows you to use managed hardware protection for your most sensitive cryptographic tasks.
16

What is 'Customer-Managed Encryption Keys' (CMEK) and how does it integrate with Cloud Storage?

It allow you to use a key from Cloud KMS to encrypt your objects in a bucket instead of using Google-managed keys
It is a password for the bucket
It means the user encrypts the data before uploading
It is only for government clouds
View Explanation
✓ Correct Answer: It allow you to use a key from Cloud KMS to encrypt your objects in a bucket instead of using Google-managed keysExplanation:CMEK gives you control over the encryption of your cloud data while still using managed services.
17

Can you 'Delete' a key in Cloud KMS to immediately destroy the key material?

No, you can 'Schedule for Destruction', which takes 24 hours (by default) to provide a safety window
Yes
Only for non-HSM keys
Only if the key hasn't been used yet
View Explanation
✓ Correct Answer: No, you can 'Schedule for Destruction', which takes 24 hours (by default) to provide a safety windowExplanation:This safety period prevents permanent data loss due to accidental key deletion.
18

Which IAM role is required for a user to just use a key to encrypt or decrypt data, but NOT manage the key itself?

Cloud KMS CryptoKey Encrypter/Decrypter
Cloud KMS Admin
Cloud KMS Viewer
Owner
View Explanation
✓ Correct Answer: Cloud KMS CryptoKey Encrypter/DecrypterExplanation:This role is following the principle of least privilege for application identities.
19

What is 'Envelope Encryption'?

A process where a Data Encryption Key (DEK) is used to encrypt the data, and that DEK is then encrypted with a Key Encryption Key (KEK) from Cloud KMS
Encrypting the physical server
A way to send keys via email
Storing keys in a paper envelope
View Explanation
✓ Correct Answer: A process where a Data Encryption Key (DEK) is used to encrypt the data, and that DEK is then encrypted with a Key Encryption Key (KEK) from Cloud KMSExplanation:Envelope encryption is more efficient for large amounts of data, as the large data isn't sent to KMS for encryption.
20

Can Cloud KMS be used to sign and verify digital signatures using asymmetric keys (Public/Private keys)?

Yes, it supports asymmetric signing using RSA or Elliptic Curve (EC) keys
No, it only supports symmetric encryption (AES)
Only for Cloud Functions
Only in the global region
View Explanation
✓ Correct Answer: Yes, it supports asymmetric signing using RSA or Elliptic Curve (EC) keysExplanation:This enables use cases like code signing or secure document verification.
21

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
22

You are designing a solution for a healthcare provider that needs to store petabytes of patient data. The data must be encrypted with keys managed by the provider on their own hardware security modules (HSM) on-premises. Which encryption method should you use?

Customer-Managed Encryption Keys (CMEK) via Cloud KMS
Cloud HSM in the Google Cloud console
Customer-Supplied Encryption Keys (CSEK) for Cloud Storage
External Key Manager (EKM) via Cloud KMS
View Explanation
✓ Correct Answer: External Key Manager (EKM) via Cloud KMSExplanation:External Key Manager (EKM) allows Cloud KMS to use keys stored on an external, on-premises HSM providers, giving the customer full control over key lifecycle outside of GCP.
23

An organization wants to centralize the management of secrets (API keys, certificates, passwords) and audit every time a secret is accessed. Which service provides this with native IAM integration?

Secret Manager
Cloud KMS
Cloud Armor
Cloud Identity
View Explanation
✓ Correct Answer: Secret ManagerExplanation:Secret Manager is the GCP service for managing sensitive information, offering versioning, lifecycle management, and detailed audit logging of access.
24

An enterprise wants to enforce a security policy that requires all data at rest in BigQuery to be encrypted using keys that they rotate and manage on-premises. Which Cloud KMS feature enables this?

Cloud EKM (External Key Manager)
Customer-Managed Encryption Keys (CMEK)
Customer-Supplied Encryption Keys (CSEK)
Cloud HSM
View Explanation
✓ Correct Answer: Cloud EKM (External Key Manager)Explanation:Cloud EKM allows vous to use keys from an external, on-premises provider for CMEK operations, giving you full control over key residency and rotation outside of GCP.
25

A global company needs a centralized place to store and manage their API keys, database passwords, and OAuth client secrets while ensuring that different projects' secrets are isolated. Which service is appropriate?

Secret Manager
Cloud Identity
Security Command Center
Cloud IAM
View Explanation
✓ Correct Answer: Secret ManagerExplanation:Secret Manager is the primary choice for managing sensitive credentials, offering high durability, integrated IAM, and audit logging.
26

An enterprise wants to ensure that all their Cloud Storage buckets are encrypted with their own keys. They also want to be able to disable access to all their data globally in an instant by revoking the keys. Which encryption method provides this 'kill switch'?

Customer-Managed Encryption Keys (CMEK)
Customer-Supplied Encryption Keys (CSEK)
Default Google-managed encryption
Cloud HSM
View Explanation
✓ Correct Answer: Customer-Managed Encryption Keys (CMEK)Explanation:With CMEK, you control the key in Cloud KMS. Disabling or deleting the key immediately renders all data encrypted with that key unreadable.
27

To meet compliance requirements that specify encryption keys must be rotated every 90 days, but you want to avoid manual overhead, how should you configure Cloud KMS?

Enable 'Automatic Key Rotation' on the key in Cloud KMS
Use a script to rotate keys via the API
Rotate keys manually
Keys do not need to be rotated in GCP
View Explanation
✓ Correct Answer: Enable 'Automatic Key Rotation' on the key in Cloud KMSExplanation:Cloud KMS supports automatic rotation for keys, creating new key versions on a schedule you define.
28

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
29

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
30

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
31

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
32

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
33

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
34

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
35

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
36

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
37

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Cloud IAM
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
38

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
39

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
40

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
41

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
42

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
43

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Cloud IAM
Google Cloud Armor
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
44

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
45

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
46

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
47

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
48

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Google Cloud Armor
Cloud IAM
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
49

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
50

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
51

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
52

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
53

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
54

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
55

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
56

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
57

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
58

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
59

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
60

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
61

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
62

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
63

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
64

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
65

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
66

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
67

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
68

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
69

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
70

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
71

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
72

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
73

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
74

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
75

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
76

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
77

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
78

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
79

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
80

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
81

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
82

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
83

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
84

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
85

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
86

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud IAM
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
87

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
88

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud IAM
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
89

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
90

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
91

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Google Cloud Storage
Cloud IAM
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
92

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
93

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
94

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
95

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
96

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
97

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
98

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
99

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
100

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
101

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Google Cloud Storage
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
102

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
103

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
104

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
105

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
106

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
107

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
108

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Armor
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
109

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Cloud IAM
Google Cloud Storage
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
110

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
111

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Google Cloud Armor
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
112

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
113

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud IAM
Google Cloud Storage
Cloud Key Management Service
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
114

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud Key Management Service
Google Cloud Storage
Google Cloud Armor
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
115

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Cloud IAM
Google Cloud Storage
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
116

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Storage
Cloud IAM
Cloud Key Management Service
Google Cloud Armor
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
117

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Google Cloud Armor
Cloud Key Management Service
Google Cloud Storage
Cloud IAM
View Explanation
✓ Correct Answer: Cloud Key Management ServiceExplanation:Cloud Key Management Service is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.