A customer wants to use Cloud EKM with a supported external key management partner. What is the first step to enable this?

Set up a connection with the external key management partner

What is the primary purpose of Confidential Computing?

To protect data while it is being processed in memory

To secure data during transmission over the network

To encrypt data at rest in storage

Google CloudProfessional Cloud Security Engineer

Domain 3Objective 2

3.2 Managing Encryption at Rest, in Transit, and in Use PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Ensuring data protection domain, which accounts for 23% of the PROFESSIONAL-CLOUD-SECURITY-ENGINEER exam.

36questions here

8free pages

12concepts

23%of the exam

Questions 11–15

11foundation · easy
Which type of data does Confidential Computing primarily protect?
Select an answer first
12foundation · easy
A customer wants to use Cloud EKM with a supported external key management partner. What is the first step to enable this?
Select an answer first
13foundation · easy
What is the primary purpose of Confidential Computing?
Select an answer first
14foundation · easy
A customer wants to automatically change the encryption key used for new data every 90 days. What should they configure in Cloud KMS?
Select an answer first
15foundation · easy
A customer needs to use encryption keys that are protected by a hardware security module (HSM) but does not want to manage the HSM infrastructure. Which Google Cloud service provides HSM-backed keys?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

3.2 Managing Encryption at Rest, in Transit, and in Use PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

Which type of data does Confidential Computing primarily protect?

A customer wants to use Cloud EKM with a supported external key management partner. What is the first step to enable this?

What is the primary purpose of Confidential Computing?

A customer wants to automatically change the encryption key used for new data every 90 days. What should they configure in Cloud KMS?

A customer needs to use encryption keys that are protected by a hardware security module (HSM) but does not want to manage the HSM infrastructure. Which Google Cloud service provides HSM-backed keys?

Keep studying — Ensuring data protection