Google Exam Professional Cloud Security Engineer Topic 3 Question 9 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 9
Topic #: 3

[All Professional Cloud Security Engineer Questions]

What are the steps to encrypt data using envelope encryption?

AGenerate a data encryption key (DEK) locally.
Use a key encryption key (KEK) to wrap the DEK. Encrypt data with the KEK.
Store the encrypted data and the wrapped KEK.

BGenerate a key encryption key (KEK) locally.
Use the KEK to generate a data encryption key (DEK). Encrypt data with the DEK.
Store the encrypted data and the wrapped DEK.

CGenerate a data encryption key (DEK) locally.
Encrypt data with the DEK.
Use a key encryption key (KEK) to wrap the DEK. Store the encrypted data and the wrapped DEK.

DGenerate a key encryption key (KEK) locally.
Generate a data encryption key (DEK) locally. Encrypt data with the KEK.
Store the encrypted data and the wrapped DEK.

Show Suggested Answer

Suggested Answer: C

https://cloud.google.com/kms/docs/envelope-encryption

by Jerry at May 07, 2022, 04:17 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!