Correct Answer: Cloud EKM (External Key Manager)
Cloud EKM allows vous to use keys from an external, on-premises provider for CMEK operations, giving you full control over key residency and rotation outside of GCP....
Correct Answer
Cloud EKM (External Key Manager)
Why This Answer Is Correct
Cloud EKM allows vous to use keys from an external, on-premises provider for CMEK operations, giving you full control over key residency and rotation outside of GCP.
This question evaluates your knowledge of Cloud Key Management Service — a core concept tested in Professional Cloud Architect. Understanding Cloud Key Management Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
You are designing a solution for a healthcare provider that needs to store petabytes of patient data. The data must be encrypted with keys managed by the provider on their own hardware security modules (HSM) on-premises. Which encryption method should you use?
An organization wants to centralize the management of secrets (API keys, certificates, passwords) and audit every time a secret is accessed. Which service provides this with native IAM integration?
A global company needs a centralized place to store and manage their API keys, database passwords, and OAuth client secrets while ensuring that different projects' secrets are isolated. Which service is appropriate?
An enterprise wants to ensure that all their Cloud Storage buckets are encrypted with their own keys. They also want to be able to disable access to all their data globally in an instant by revoking the keys. Which encryption method provides this 'kill switch'?