You Want to Archive Data in Cloud Storage

question 196

Multiple Choice

You want to archive data in Cloud Storage. Because some data is very sensitive, you want to use the "Trust No One" (TNO) approach to encrypt your data to prevent the cloud provider staff from decrypting your data. What should you do?

• A) Use gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key and unique additional authenticated data (AAD). Use gsutil cp to upload each encrypted file to the Cloud Storage bucket, and keep the AAD outside of Google Cloud. Use gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key and unique additional authenticated data (AAD). Use gsutil cp to upload each encrypted file to the Cloud Storage bucket, and keep the AAD outside of Google Cloud.
• B) Use gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key. Use gsutil cp to upload each encrypted file to the Cloud Storage bucket. Manually destroy the key previously used for encryption, and rotate the key once. Use gcloud kms keys create to create a symmetric key. Then use to encrypt each archival file with the key. Use gsutil cp to upload each encrypted file to the Cloud Storage bucket. Manually destroy the key previously used for encryption, and rotate the key once.
• C) Specify customer-supplied encryption key (CSEK) in the . boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in Cloud Memorystore as permanent storage of the secret. Specify customer-supplied encryption key (CSEK) in the . boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in Cloud Memorystore as permanent storage of the secret.
• D) Specify customer-supplied encryption key (CSEK) in the . boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in a different project that only the security team can access. to upload each archival file to the Cloud Storage bucket. Save the CSEK in a different project that only the security team can access.

---

Definitions:

Income Statement Columns

Sections within an income statement that separate financial data into categories, such as revenues, expenses, and net income, to facilitate analysis and understanding of a company's financial performance.

Adjusting Entries

Accounting records created at the closing of an accounting period for the purpose of assigning revenues and expenses to the timeframe in which they truly took place.

Adjusted Trial Balance

A financial statement that lists all the accounts and balances after adjustments have been made.

Partial Worksheet

A tool in accounting that shows a portion of the ledger accounts for a specific purpose, not a full financial statement.