ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 184 - Professional Cloud Developer discussion

Report
Export

Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the 'separation of duties' principle and Google-recommended best practices. What should you do? (Choose two.)

A.
Provision Cloud KMS in its own project.
Answers
A.
Provision Cloud KMS in its own project.
B.
Do not assign an owner to the Cloud KMS project.
Answers
B.
Do not assign an owner to the Cloud KMS project.
C.
Provision Cloud KMS in the project where the keys are being used.
Answers
C.
Provision Cloud KMS in the project where the keys are being used.
D.
Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.
Answers
D.
Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.
E.
Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.
Answers
E.
Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.
Suggested answer: A, B

Explanation:

https://cloud.google.com/kms/docs/separation-of-duties#using_separate_project

asked 18/09/2024
Dilip Kumar
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first