A security team requires that all data stored in Cloud Storage be encrypted with customer-managed keys (CMEK). They have already created a key ring and key in Cloud KMS. What is the next step to enforce this for a new bucket?

Create the bucket and specify the KMS key as the default encryption key.

Set a retention policy on the bucket.

Enable object versioning on the bucket.

Grant the storage.objectAdmin role to the KMS key service account.

Google CloudAssociate Cloud Engineer

Domain 3Objective 2

3.2 Managing Storage and Data Solutions ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 12)

Part of the Ensuring the successful operation of a cloud solution domain, which accounts for ~30% of the ASSOCIATE-CLOUD-ENGINEER exam.

58questions here

12free pages

24concepts

~30%of the exam

24 Concepts in This Objective

Cloud Storage bucket security
Cloud Storage object management
Object lifecycle management policies
Querying Cloud SQL
Querying BigQuery
Querying Bigtable
Querying Spanner
Querying Firestore
Querying AlloyDB
Estimating data storage costs
Backing up Cloud SQL
Restoring Cloud SQL
Backing up Firestore
Restoring Firestore
Backing up Spanner
Restoring Spanner
Backing up AlloyDB
Restoring AlloyDB
Backing up Bigtable
Restoring Bigtable
Reviewing Dataflow job status
Reviewing BigQuery job status
Using Database Center
Configuring CMEK for data storage

Questions 56–58

56application · medium
A security team requires that all data stored in Cloud Storage be encrypted with customer-managed keys (CMEK). They have already created a key ring and key in Cloud KMS. What is the next step to enforce this for a new bucket?
Select an answer first
57foundation · easy
Which operation restores a Cloud Spanner database from a backup?
Select an answer first
58foundation · easy
Which gcloud command creates a manual backup of a Cloud SQL instance?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ASSOCIATE-CLOUD-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-CLOUD-ENGINEER” is a trademark of its owner, used for identification only.

3.2 Managing Storage and Data Solutions ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 12)

Questions 56–58

A security team requires that all data stored in Cloud Storage be encrypted with customer-managed keys (CMEK). They have already created a key ring and key in Cloud KMS. What is the next step to enforce this for a new bucket?

Which operation restores a Cloud Spanner database from a backup?

Which gcloud command creates a manual backup of a Cloud SQL instance?

Keep studying — Ensuring the successful operation of a cloud solution