Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsecurity › Which Google Cloud service centrally manages cry…
Which Google Cloud service centrally manages cryptographic keys (creation, rotation, destruction) for encrypting customer data at rest?
ACloud Key Management Service (Cloud KMS)
BCloud Identity
CCloud DNS
DCloud Build
Answer & Solution
Correct answer: A. Cloud Key Management Service (Cloud KMS)
Cloud KMS hosts and manages keys, supports rotation schedules, audit logs, and integrations with services like GCS, BigQuery, Compute Engine (CMEK). DNS is name resolution, Identity is the directory, Build is CI/CD.
Related questions
Which IAM principle does Google Cloud recommend when granting a service account access to Which Google Cloud feature provides a centralised reverse proxy that verifies the user's iAn organisation wants to enforce that only signed and approved container images can be depWorkload Identity Federation lets external (non-Google) identities (e.g. AWS IAM, GitHub AAn auditor needs to determine which user deleted a Cloud Storage bucket in a project last Which approach gives a GKE workload SHORT-LIVED credentials to access Google APIs WITHOUT Which Google Cloud product stores secrets (API tokens, passwords, certificates) with versiService account impersonation lets a principal: