Your retail organization stores sensitive application usage data in Cloud Storage. You need to encrypt the data without the operational overhead of managing encryption keys. What should you do?
A.
Use Google-managed encryption keys (GMEK).
B.
Use customer-managed encryption keys (CMEK).
C.
Use customer-supplied encryption keys (CSEK).
D.
Use customer-supplied encryption keys (CSEK) for the sensitive data and customer-managed encryption keys (CMEK) for the less sensitive data.
Using Google-managed encryption keys (GMEK) is the best choice when you want to encrypt sensitive data in Cloud Storage without the operational overhead of managing encryption keys. GMEK is the default encryption mechanism in Google Cloud, and it ensures that data is automatically encrypted at rest with no additional setup or maintenance required. It provides strong security while eliminating the need for manual key management.
Google Cloud encrypts all data at rest by default, and the simplest way to avoid key management overhead is to use Google-managed encryption keys (GMEK).
Option A: GMEK is fully managed by Google, requiring no user intervention, and meets the requirement of no operational overhead while ensuring encryption.
Option C: CSEK requires users to supply and manage keys externally, increasing complexity significantly.
[: Google Cloud Documentation - "Encryption Options" (https://cloud.google.com/storage/docs/encryption)., , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit