A customer wants to move their sensitive workloads to a Compute Engine-based cluster using Managed Instance Groups (MIGs). The jobs are bursty and must be completed quickly. They have a requirement to be able to manage and rotate the encryption keys.
Which boot disk encryption solution should you use on the cluster to meet this customer's requirements?

• A.Customer-supplied encryption keys (CSEK)
• B.Customer-managed encryption keys (CMEK) using Cloud Key Management Service (KMS)
• C.Encryption by default
• D.Pre-encrypting files before transferring to Google Cloud Platform (GCP) for analysis

Comment: *

Name: *

Email: *

Verification: *

An office manager at your small startup company is responsible for matching payments to invoices and creating billing alerts. For compliance reasons, the office manager is only permitted to have the Identity and Access Management (IAM) permissions necessary for these tasks. Which two IAM roles should the office manager have? (Choose two.)

• A.Billing Account User
• B.Project Creator
• C.Billing Account Viewer
• D.Organization Administrator
• E.Billing Account Costs Manager

Comment: *

Name: *

Email: *

Verification: *

What are the steps to encrypt data using envelope encryption?

• A.Generate a data encryption key (DEK) locally.
  Use a key encryption key (KEK) to wrap the DEK. Encrypt data with the KEK.
  Store the encrypted data and the wrapped KEK.
• B.Generate a key encryption key (KEK) locally.
  Use the KEK to generate a data encryption key (DEK). Encrypt data with the DEK.
  Store the encrypted data and the wrapped DEK.
• C.Generate a data encryption key (DEK) locally.
  Encrypt data with the DEK.
  Use a key encryption key (KEK) to wrap the DEK. Store the encrypted data and the wrapped DEK.
• D.Generate a key encryption key (KEK) locally.
  Generate a data encryption key (DEK) locally. Encrypt data with the KEK.
  Store the encrypted data and the wrapped DEK.

Comment: *

Name: *

Email: *

Verification: *