Scenario: An organization needs to ensure that the data stored in their Cloud Storage buckets is encrypted using keys that they rotate and manage themselves. Which service is and feature are needed?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Cloud KMS + CMEK

Using Customer-Managed Encryption Keys (CMEK) generated in Cloud KMS allows organizations to encrypt their Cloud Storage data while retaining full ownership and control of the keys...

๐Ÿ“‹Part of Associate Cloud Engineer ยท GCP Certification Practice
Real Exam ScenarioScenario Based

Scenario: An organization needs to ensure that the data stored in their Cloud Storage buckets is encrypted using keys that they rotate and manage themselves. Which service is and feature are needed?

โœ“ Correct Answer & ExplanationScenario Based

Correct Answer

Cloud KMS + CMEK

Why This Answer Is Correct

Using Customer-Managed Encryption Keys (CMEK) generated in Cloud KMS allows organizations to encrypt their Cloud Storage data while retaining full ownership and control of the keys.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Scenario Based โ€” a core concept tested in Associate Cloud Engineer. Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.