Google Exam Professional Cloud Security Engineer Topic 1 Question 93 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 93
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You are setting up a new Cloud Storage bucket in your environment that is encrypted with a customer managed encryption key (CMEK). The CMEK is stored in Cloud Key Management Service (KMS). in project "pr j -a", and the Cloud Storage bucket will use project "prj-b". The key is backed by a Cloud Hardware Security Module (HSM) and resides in the region europe-west3. Your storage bucket will be located in the region europe-west1. When you create the bucket, you cannot access the key. and you need to troubleshoot why.

What has caused the access issue?

AA firewall rule prevents the key from being accessible.

BCloud HSM does not support Cloud Storage

CThe CMEK is in a different project than the Cloud Storage bucket

DThe CMEK is in a different region than the Cloud Storage bucket.

Show Suggested Answer

Suggested Answer: D

When you use a customer-managed encryption key (CMEK) to secure a Cloud Storage bucket, the key and the bucket must be located in the same region. In this case, the key is in europe-west3 and the bucket is in europe-west1, which is why you're unable to access the key.

by Julio at Oct 23, 2024, 05:48 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sol

6 days ago

Ah, I got it! The answer is C. Gotta have that CMEK in the same project as the bucket, duh. Rookie mistake, really.

upvoted 0 times

...

Tayna

14 days ago

Woah, this is a tricky one. I'm going with D, the CMEK is in a different region. That's gotta be the issue, right?

upvoted 0 times

...

Catina

19 days ago

I agree with Xochitl. The key needs to be in the same project as the bucket for access.

upvoted 0 times

...

Dorothy

19 days ago

Hmm, I think the answer is C. The CMEK is in a different project than the Cloud Storage bucket, so the bucket can't access it. Simple as that!

upvoted 0 times

Melda

1 days ago

I think the answer is C. The CMEK is in a different project than the Cloud Storage bucket, so the bucket can't access it.

upvoted 0 times

...

Xochitl

24 days ago

I think the issue is that the CMEK is in a different project than the Cloud Storage bucket.

upvoted 0 times

...