Exam Associate Data Practitioner topic 1 question 63 discussion

Actual exam question from Google's Associate Data Practitioner

Question #: 63
Topic #: 1

[All Associate Data Practitioner Questions]

You work for a financial services company that handles highly sensitive data. Due to regulatory requirements, your company is required to have complete and manual control of data encryption. Which type of keys should you recommend to use for data storage?

A. Use customer-supplied encryption keys (CSEK).
B. Use a dedicated third-party key management system (KMS) chosen by the company.
C. Use Google-managed encryption keys (GMEK).
D. Use customer-managed encryption keys (CMEK).

Show Suggested Answer

Suggested Answer: A 🗳️

by rich_maverick at Feb. 28, 2025, 3:30 a.m.

Comments

Submit Cancel

n2183712847

3 months, 2 weeks ago

Selected Answer: A

The best option is A. Use customer-supplied encryption keys (CSEK). Option A is best because CSEK provides complete manual control over keys, meeting strict regulatory needs. Option B (Third-party KMS) is incorrect because CSEK already provides control within Google Cloud. Option C (GMEK) is incorrect because Google manages keys, not the company. Option D (CMEK) is incorrect because keys are managed within Google KMS, not fully manual control. Therefore, Option A, CSEK, offers the most direct and complete manual key control.

upvoted 2 times

...

n2183712847

3 months, 2 weeks ago

Selected Answer: A

xfasdfadsfsadf

upvoted 1 times

...

rich_maverick

3 months, 3 weeks ago

Selected Answer: D

CSEK is a dying deployment that is only supported by a few of the storage services. For compete and manual control of data encryption, you need to use CMEK.

upvoted 1 times

n2183712847

3 months, 1 week ago

no this is wrong. for complete control you use csek.

upvoted 1 times

...