Correct Answer: No, you can 'Schedule for Destruction', which takes 24 hours (by default) to provide a safety window
Cloud KMS prevents immediate deletion of keys; scheduling a key for destruction triggers a 24-hour safety window during which the destruction request can be cancelled to avoid perm...
Correct Answer
No, you can 'Schedule for Destruction', which takes 24 hours (by default) to provide a safety window
Why This Answer Is Correct
Cloud KMS prevents immediate deletion of keys; scheduling a key for destruction triggers a 24-hour safety window during which the destruction request can be cancelled to avoid permanent data loss.
This question evaluates your knowledge of Cloud Key Management Service — a core concept tested in Associate Cloud Engineer. Understanding Cloud Key Management Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
Which Google Cloud service allows you to manage cryptographic keys (AES-256, RSA, etc.) at scale and use them to protect your data-at-rest?
What is the difference between a 'Key Ring' and a 'CryptoKey' in Cloud KMS?
What is 'Automatic Key Rotation' in Cloud KMS?
Which Cloud KMS feature provides Hardware Security Module (HSM) protection (FIPS 140-2 Level 3) for your keys without requiring you to manage physical hardware?