You Need to Follow Google-Recommended Practices to Leverage Envelope Encryption

question 25

Multiple Choice

You need to follow Google-recommended practices to leverage envelope encryption and encrypt data at the application layer. What should you do?

• A) Generate a data encryption key (DEK) locally to encrypt the data, and generate a new key encryption key (KEK) in Cloud KMS to encrypt the DEK. Store both the encrypted data and the encrypted DEK.
• B) Generate a data encryption key (DEK) locally to encrypt the data, and generate a new key encryption key (KEK) in Cloud KMS to encrypt the DEK. Store both the encrypted data and the KEK.
• C) Generate a new data encryption key (DEK) in Cloud KMS to encrypt the data, and generate a key encryption key (KEK) locally to encrypt the key. Store both the encrypted data and the encrypted DEK.
• D) Generate a new data encryption key (DEK) in Cloud KMS to encrypt the data, and generate a key encryption key (KEK) locally to encrypt the key. Store both the encrypted data and the KEK.

---

Definitions:

Salt Dome

A type of geological formation where a mass of salt has risen upward through the overlying rock, often creating traps for oil and gas.

Oil Field

An area underlain by one or more reservoirs containing oil that can be extracted, often associated with gas deposits.

Impermeable Reservoir

A geological formation that cannot transmit water or other fluids, often trapping fluids such as oil or natural gas.

Sandstone Lens

A body of sandstone that is thicker in the middle and tapers towards the edges, often sandwiched between other rock layers.