Topic 1 Question 242
Your application stores customers’ content in a Cloud Storage bucket, with each object being encrypted with the customer's encryption key. The key for each object in Cloud Storage is entered into your application by the customer. You discover that your application is receiving an HTTP 4xx error when reading the object from Cloud Storage. What is a possible cause of this error?
You attempted the read operation on the object with the customer's base64-encoded key.
You attempted the read operation without the base64-encoded SHA256 hash of the encryption key.
You entered the same encryption algorithm specified by the customer when attempting the read operation.
You attempted the read operation on the object with the base64-encoded SHA256 hash of the customer's key.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: C
You receive an HTTP 400 error in the following cases:
1.You upload an object using a customer-supplied encryption key, and you attempt to perform another operation on the object (other than requesting or updating most metadata or deleting the object) without providing the key. 2.You upload an object using a customer-supplied encryption key, and you attempt to perform another operation on the object with an incorrect key. 3.You upload an object without providing a customer-supplied encryption key, and you attempt to perform another operation on the object with a customer-supplied encryption key. 4.You specify an encryption algorithm, key, or SHA256 hash that is not valid. Point number 2 has the answer https://cloud.google.com/storage/docs/encryption/customer-supplied-keys#response
👍 3TNT872023/01/31 - 正解だと思う選択肢: B
Answer B, made a mistsake
👍 2TNT872023/02/01 - 正解だと思う選択肢: D
Option D is a possible cause of an HTTP 4xx error when reading an object from Cloud Storage because it is incorrect to use the base64-encoded SHA256 hash of the customer's encryption key to read an encrypted object. To read an encrypted object, you need to use the original encryption key, not its hash. The HTTP 4xx error could be a result of an incorrect or unsupported key format, or a key mismatch. On the other hand, using the base64-encoded key (Option A), the encryption algorithm (Option C), or the base64-encoded SHA256 hash of the encryption key (Option B) without the original encryption key would not allow the object to be decrypted and read.
👍 2mrvergara2023/02/04
シャッフルモード