Exam Professional Cloud Security Engineer topic 1 question 66 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 66
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You want data on Compute Engine disks to be encrypted at rest with keys managed by Cloud Key Management Service (KMS). Cloud Identity and Access
Management (IAM) permissions to these keys must be managed in a grouped way because the permissions should be the same for all keys.
What should you do?

A. Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the Key level.
B. Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the KeyRing level.
C. Create a KeyRing per persistent disk, with each KeyRing containing a single Key. Manage the IAM permissions at the Key level.
D. Create a KeyRing per persistent disk, with each KeyRing containing a single Key. Manage the IAM permissions at the KeyRing level.

Show Suggested Answer

Suggested Answer: B 🗳️

by MohitA at Sept. 2, 2020, 10:04 a.m.

Comments

Submit Cancel

TNT87

Highly Voted 3 years, 10 months ago

Ans B https://cloud.netapp.com/blog/gcp-cvo-blg-how-to-use-google-cloud-encryption-with-a-persistent-disk

upvoted 15 times

...

[Removed]

Most Recent 1 year ago

Selected Answer: B

B… question states permissions should be the same for all keys.

upvoted 2 times

[Removed]

1 year ago

and should be managed in a group way.

upvoted 1 times

...

ArizonaClassics

1 year, 3 months ago

B. Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the KeyRing level: This is efficient. By managing permissions at the KeyRing level, you're effectively grouping permissions for all keys in that KeyRing. As permissions should be the same for all keys, this is a logical choice.

upvoted 2 times

...