Professional Data Engineer · Free Practice Question Medium
Question 2
A financial services company wants to use BigQuery for data warehousing and analytics. The company is required to ensure encryption keys are stored and managed in a key management system that’s deployed outside of a public cloud. They want to minimize the management overhead of key management while remaining in compliance. What would you recommend they do?
- A Use Data Catalog for external data management, specifically keys
- B Use Dataproc for external data management, specifically keys
- C Use external data sources with BigQuery and encrypt the external data sources outside of Google Cloud
- D Use Cloud EKM for external key management
Reveal correct answer
Correct answer: D
Explanation
The correct answer is to use External Key Management, it allows the company to maintain separation between data in BigQuery and their encryption keys. Data Catalog is a metadata and data discovery service, not a key management service. BigQuery external data sources allow for accessing data not stored in BigQuery and do not address the requirements. Cloud Dataproc is a managed Spark and Hadoop service, not a key management service. See https://cloud.google.com/kms/docs/ekm
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
