Which service in Google Cloud is used to create and manage encryption keys, including key rotation and access control, and can be used by other Google Cloud services to encrypt data?

Cloud Key Management Service (Cloud KMS)

Identity and Access Management (IAM)

An organization must meet a compliance requirement that mandates they have the ability to control and manage the lifecycle of the encryption keys used to protect their data in Google Cloud. Which encryption key management model provides this capability?

Customer-supplied encryption keys (CSEK)

Cloud External Key Manager (Cloud EKM)

Customer-managed encryption keys (CMEK)

Google-managed encryption keys (GMEK)

A startup wants to minimize the effort required to secure data at rest in Google Cloud while still meeting basic compliance requirements. They have no specific key management needs. Which encryption approach should they use?

Use Google-managed encryption keys (GMEK).

Use customer-supplied encryption keys (CSEK).

Use Cloud External Key Manager (Cloud EKM).

Use customer-managed encryption keys (CMEK) with Cloud KMS.

A security team wants to audit when encryption keys are used and rotated in Cloud KMS. They need to track these events for compliance purposes. What should they enable?

Cloud Monitoring alerts for key rotation.

Cloud Key Management Service's built-in key usage report.

Cloud Audit Logs with data access logs for Cloud KMS.

VPC Flow Logs for the network traffic to Cloud KMS.

Google CloudAssociate Data Practitioner

Domain 4Objective 4

4.2 Apply Security Measures and Ensure Compliance with Data Privacy Regulations ASSOCIATE-DATA-PRACTITIONER Practice Questions (Page 1)

Part of the Data Management domain, which accounts for ~25% of the ASSOCIATE-DATA-PRACTITIONER exam.

16questions here

4free pages

3concepts

~25%of the exam

Questions 1–5

1foundation · easy
Which service in Google Cloud is used to create and manage encryption keys, including key rotation and access control, and can be used by other Google Cloud services to encrypt data?
Select an answer first
2foundation · easy
An organization must meet a compliance requirement that mandates they have the ability to control and manage the lifecycle of the encryption keys used to protect their data in Google Cloud. Which encryption key management model provides this capability?
Select an answer first
3application · easy
A startup wants to minimize the effort required to secure data at rest in Google Cloud while still meeting basic compliance requirements. They have no specific key management needs. Which encryption approach should they use?
Select an answer first
4foundation · easy
A data practitioner wants to automate the rotation of encryption keys used by a Google Cloud service. Which feature of Cloud KMS should they use?
Select an answer first
5application · medium
A security team wants to audit when encryption keys are used and rotated in Cloud KMS. They need to track these events for compliance purposes. What should they enable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-DATA-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-DATA-PRACTITIONER” is a trademark of its owner, used for identification only.