Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsecurity › Which Google Cloud product stores secrets (API t…
Which Google Cloud product stores secrets (API tokens, passwords, certificates) with versioning, IAM-controlled access, and audit logging?
ABigQuery datasets
BSecret Manager
CCompute Engine instance metadata custom fields
DCloud Storage public buckets
Answer & Solution
Correct answer: B. Secret Manager
Secret Manager is the purpose-built secrets store — versioned secrets, IAM bindings, audit. Public buckets and instance metadata are bad places for secrets; BigQuery is for analytics, not secret handling.
Related questions
Which IAM principle does Google Cloud recommend when granting a service account access to Which Google Cloud feature provides a centralised reverse proxy that verifies the user's iAn organisation wants to enforce that only signed and approved container images can be depWorkload Identity Federation lets external (non-Google) identities (e.g. AWS IAM, GitHub AAn auditor needs to determine which user deleted a Cloud Storage bucket in a project last Which approach gives a GKE workload SHORT-LIVED credentials to access Google APIs WITHOUT Which Google Cloud service centrally manages cryptographic keys (creation, rotation, destrService account impersonation lets a principal: