Topic 1 Question 196
Your organization previously stored files in Cloud Storage by using Google Managed Encryption Keys (GMEK), but has recently updated the internal policy to require Customer Managed Encryption Keys (CMEK). You need to re-encrypt the files quickly and efficiently with minimal cost.
What should you do?
Reupload the files to the same Cloud Storage bucket specifying a key file by using gsutil.
Encrypt the files locally, and then use gsutil to upload the files to a new bucket.
Copy the files to a new bucket with CMEK enabled in a secondary region.
Change the encryption type on the bucket to CMEK, and rewrite the objects.
ユーザの投票
コメント(7)
- 👍 2K1SMM2023/08/02
re-writing the objects is not quick and efficient. Option D is incorrect.
C. Copy the files to a new bucket with CMEK enabled in a secondary region.Option C is the most efficient and cost-effective solution. It would create a new bucket with CMEK enabled in a secondary region. The files would be copied to the new bucket, and the encryption type would be changed to CMEK. This would allow the files to be accessed using CMEK, while minimizing the impact on performance and availability.
👍 2arpgaur2023/08/14- 正解だと思う選択肢: D👍 2RuchiMishra2023/08/14
シャッフルモード