Correct Answer: Yes, they are always encrypted with a Google-managed key or a customer-managed encryption key (CMEK)
Secret Manager automatically encrypts all secret payloads at rest using Google-managed encryption keys or customer-managed keys (CMEK) via Cloud KMS....
Correct Answer
Yes, they are always encrypted with a Google-managed key or a customer-managed encryption key (CMEK)
Why This Answer Is Correct
Secret Manager automatically encrypts all secret payloads at rest using Google-managed encryption keys or customer-managed keys (CMEK) via Cloud KMS.
This question evaluates your knowledge of Cloud Key Management Service — a core concept tested in Cloud Digital Leader. Understanding Cloud Key Management Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is Google Cloud Secret Manager used for?
In Secret Manager, what is the difference between a 'Secret' and a 'Secret Version'?
Which GCP service is used to control who has access to specific secrets in Secret Manager?
Does Secret Manager support automatic rotation of secrets?