Exam Professional-Cloud-Security-Engineer Topic 3 Question 30 Discussion

Actual exam question for Google's Professional-Cloud-Security-Engineer exam
Question #: 30
Topic #: 3
Your company is storing sensitive data in Cloud Storage. You want a key generated on-premises to be used in the encryption process.
What should you do?

Suggested Answer: C Vote an answer

This is a Customer-supplied encryption keys (CSEK).
We generate our own encryption key and manage it on-premises.
A KEK never leaves Cloud KMS.There is no KEK or KMS on-premises.
Encryption at rest by default, with various key management options.
https://cloud.google.com/security/encryption-at-rest

by Leona at May 11, 2026, 02:12 AM

Limited Time Offer

15%

Off

Get Premium Professional-Cloud-Security-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10