Correct Answer: Cloud HSM (integrated with Cloud KMS)
Cloud HSM allows you to use managed hardware protection for your most sensitive cryptographic tasks....
Correct Answer
Cloud HSM (integrated with Cloud KMS)
Why This Answer Is Correct
Cloud HSM allows you to use managed hardware protection for your most sensitive cryptographic tasks.
This question evaluates your knowledge of Cloud Key Management Service — a core concept tested in Associate Cloud Engineer. Understanding Cloud Key Management Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
Which Google Cloud service allows you to manage cryptographic keys (AES-256, RSA, etc.) at scale and use them to protect your data-at-rest?
What is the difference between a 'Key Ring' and a 'CryptoKey' in Cloud KMS?
What is 'Automatic Key Rotation' in Cloud KMS?
What is 'Customer-Managed Encryption Keys' (CMEK) and how does it integrate with Cloud Storage?