Professional Cloud Devops Engineer · Free Practice Question Medium
Question 3
As a Social impact investment platform company, you are deploying an application that requires access to sensitive information. What measures should you take to ensure that this information is encrypted and the chances of exposure are minimal in case of a breach? Additionally, which Google Cloud Services can be leveraged to achieve this goal?
- A Frequently rotate encryption keys and keep them stored in Cloud Key Management Service (KMS).
- B During the creation of the instance, use an encrypted configuration management system to insert the secret.
- C Create a continuous build pipeline that generates various versions of the secret for every application instance.
- D Incorporate a Single sign-on (SSO) system to the application and ensure that no secrets are revealed to the application.
Reveal correct answer
Correct answer: A
Explanation
This answer is correct for the question as it provides a recommended approach for ensuring the confidentiality of sensitive information in a cloud environment. Storing encryption keys in Cloud Key Management Service (KMS) is a best practice for managing encryption keys securely in Google Cloud. Cloud KMS provides a highly available and scalable key management service that enables customers to generate, use, rotate, and destroy encryption keys. Rotating encryption keys frequently is also a recommended practice, as it reduces the risk of data exposure if a key is compromised. This ensures that the data remains encrypted even if an attacker gains access to the encrypted data. In addition to using Cloud KMS, other Google Cloud services can be leveraged to achieve this goal, including: - Google Cloud Storage for storing encrypted data securely - Google Cloud Identity and Access Management (IAM) for controlling access to sensitive data and resources - Google Cloud Security Command Center for monitoring security and detecting potential threats in real-time By implementing these measures, a social impact investment platform company can ensure that sensitive information is encrypted and the chances of exposure are minimal in case of a breach.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
