Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 66

Question

You want data on Compute Engine disks to be encrypted at rest with keys managed by Cloud Key Management Service (KMS). Cloud Identity and Access Management (IAM) permissions to these keys must be managed in a grouped way because the permissions should be the same for all keys. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the KeyRing level. Persistent Disk provides durable block storage attached to Compute Engine VMs. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 66